KDC Event ID 11

9 Mar 2006 7:40 PM

Gary Angus

I keep getting this in my event system log - There are multiple accounts
with name New_U***@mydomain.com of type DS_USER_PRINCIPAL_NAME.   I have
followed KB articles to check for duplicate spn's and sid's and all are
negative. I have tried to add a new user in AD by the name of new_user and
it will not let me. The server is my only DC and is W2003. I can't find
this object anywhere. We are using DirXML to create the user accounts in AD
from Netware eDir.   The new accounts in eDir do use a new user creation
template by the name of New_User for the main details of account setup. Any
ideas?     I accidentally posted this in the ad.dsml group.

Thanks
Gary Angus

9 Mar 2006 8:03 PM

Paul Williams [MVP]

Use the following LDAP query:

(&(objectCategory=person)(userPrincipalName=new_u***@mydomain.com))

Does it yield two different user objects? If so, you need to modify the UPN
of one of them (the account tab). I don't know how you managed two, but
there you have it.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net

10 Mar 2006 1:45 PM

Gary Angus

That was easy.

Thanks a bunch
Gary
Show quoteHide quote

"Paul Williams [MVP]" <ptw2***@hotmail.com> wrote in message
news:ejDYQS7QGHA.4688@TK2MSFTNGP11.phx.gbl...
> Use the following LDAP query:
>
> (&(objectCategory=person)(userPrincipalName=new_u***@mydomain.com))
>
>
> Does it yield two different user objects? If so, you need to modify the
UPN
> of one of them (the account tab). I don't know how you managed two, but
> there you have it.
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>

24 May 2006 5:15 PM

Daniel P. Cayea

How do you run the query, is it in ADSI edit?

TIA
Dan

--
Daniel P. Cayea
Capital Region BOCES NERIC
Peru Central School District

Show quoteHide quote

"Paul Williams [MVP]" wrote:

> Use the following LDAP query:
>
> (&(objectCategory=person)(userPrincipalName=new_u***@mydomain.com))
>
>
> Does it yield two different user objects? If so, you need to modify the UPN
> of one of them (the account tab). I don't know how you managed two, but
> there you have it.
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>
>

24 May 2006 8:35 PM

Jorge de Almeida Pinto [MVP]

for example using ADFIND (www.joeware.net)

ADFIND -default -f
"(&(objectCategory=person)(userPrincipalName=new_u***@mydomain.com))"

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------

Show quoteHide quote

"Daniel P. Cayea" <lyonadmiral@nospam.postalias> wrote in message
news:663C9E9D-9404-46B4-BD90-87B8D481D070@microsoft.com...
> How do you run the query, is it in ADSI edit?
>
> TIA
> Dan
> --
> Daniel P. Cayea
> Capital Region BOCES NERIC
> Peru Central School District
>
>
> "Paul Williams [MVP]" wrote:
>
>> Use the following LDAP query:
>>
>> (&(objectCategory=person)(userPrincipalName=new_u***@mydomain.com))
>>
>>
>> Does it yield two different user objects? If so, you need to modify the
>> UPN
>> of one of them (the account tab). I don't know how you managed two, but
>> there you have it.
>>
>> --
>> Paul Williams
>> Microsoft MVP - Windows Server - Directory Services
>> http://www.msresource.net | http://forums.msresource.net
>>
>>
>>