Adding duplicate names in Windows 2003 Domain not issuing any Warn

Hi

While our helpdesk team adding / joing any new PCs to domain with the
existing names not showing any warnings (but if do the DSA console we are
getting it), is there anyway to configure warnings while adding duplicate
names to AD? Because of thsi issue we are facing problem with the old pcs
with the same name in domain.

Thanks in advance for any valuable suggestions..
Lal
--
----Server Management Team----

According to the post above i understand that want to generate a
warning if you have any duplicate names exististing in the AD while
joining the domian ?

You can always see this in the eventviewer NetLogon event 3210 in the
system event log and at the client side it should give the error
below.


Windows cannot connect to the domain either because the domain
controller is down or otherwise unavailable, or because your computer
account was not found. Please try again later. If this message
continues to appear contact your System Administrator for assistance.

and you can also clean the stale computer accounts using dsquery
command.

dsquery computer -inactive 8 -limit 0 >c:\computer.txt

the aboce command indiacates to check the stale computer accounts that
haven’t logged in in a period of time of 8 weeks

dsquery computer -inactive 8 -limit 0 | dsrm -noprompt

above command will be used to remove the stale accounts

"Laljeev M" <news08@nospam.nospam> wrote in message
news:9B8B1C36-6CAD-4159-AB67-3930CE91233A@microsoft.com...
> Hi
>
> While our helpdesk team adding / joing any new PCs to domain with the
> existing names not showing any warnings (but if do the DSA console we are
> getting it), is there anyway to configure warnings while adding duplicate
> names to AD? Because of thsi issue we are facing problem with the old pcs
> with the same name in domain.
>
> Thanks in advance for any valuable suggestions..
> Lal
> --
> ----Server Management Team----


First, you normally wouldn't be able to create a duplicate object in AD,
however this may occur when joining a machine. You can follow Syed's
suggestion, to keep tabs on the event logs, or you can create a join machine
script available for your techs, with a function to search AD for the name,
and if found, deny the join. I worked at one place where the desktop guy
created such a script. Pretty cool script. He created it with a pop-up GUI
to ask for your credentials, and the domain name to add it to.

Unfortunately, I can't provide the script since I don't have a copy of it.

In the meantime, run the utility in the following link to search for old
computer accounts. This way at least you have a list of them you can
research their existence, and delete if necessary.

OldCmp
Command line Active Directory tool to find old user and computer
accounts.Dec 28, 2004.
www.joeware.net/freetools/tools/oldcmp/index.htm

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum to benefit from collaboration
among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

Hi Syed / Ace

Thanks for your reply..

Currently we are instructing our helpdesk to use DSA console for adding any
new PCs. But actually MS has to provide a solution for this (when adding any
new PCs with existing names)

Regards
Lal
----Server Management Team----

"Laljeev M" <news08@nospam.nospam> wrote in message
news:CFB2F3CD-E3AA-4150-9CCD-3B7AD0CA9072@microsoft.com...
> Hi Syed / Ace
>
> Thanks for your reply..
>
> Currently we are instructing our helpdesk to use DSA console for adding
> any
> new PCs. But actually MS has to provide a solution for this (when adding
> any
> new PCs with existing names)
>
> Regards
> Lal
> ----Server Management Team----


I would be curious what Microsoft's response would be. If you can post it,
that would be great. I believe it would benefit others.

Thank you,

Ace