본문 바로가기

Microsoft/Windows Server 2003

AD의 지워진 개체 찾는 방법

지워진 개체 찾는 방법

 

액티브 디렉터리에서 개체가 지워지면 바로 삭제되지 않고 기본적으로 60일동안 tombstones에 남겨지게 된다. 바로 이 남겨진 정보를 Show Deleted Object control (controlType = 1.2.840.113556.1.4.417)을 이용하면 찾을 수 있는 것이다. 그러나 60일이 경과되어 완전히 지워진 개체(garbage collected)는 찾을 수 없다.

 

아래의 순서대로 Capture 한것이다.

1.

Start -> Run ,ldp 입력.

사용자 삽입 이미지

2.

Connect and bind to a domain controller in the domain whose tombstones you want to retrieve.

Connection -> Connect ,server name ,port number 입력

Connection -> Bind , account name, password, domain 입력 

 

사용자 삽입 이미지
사용자 삽입 이미지

3.

Browse ->Search .

4.

Base DN , tombstones정보를 얻고자 하는 DN 입력

5.

Filter, (isDeleted=*) 입력

6.

Scope , Subtree  클릭

사용자 삽입 이미지
 





7.

Search에서 Options 클릭

8.

Search Options , Search Call Type에 Extended 선택

사용자 삽입 이미지

9.

Search option에서 Controls클릭, 그리고 Object Identifier에 다음값을 입력 
1.2.840.113556.1.4.417

 

사용자 삽입 이미지

 

11.

입력을 마친후 Active Controls로 Check in클릭, 그리고 ok .

사용자 삽입 이미지

12.

Search Options에서도 OK .

13.

Search에서 Run 클릭.

 

사용자 삽입 이미지

 

 

 

Results

 

***Searching...

ldap_search_ext_s(ld, "DC=Nwtraders1,DC=msft", 2, "(isDeleted=*)", attrList,  0, svrCtrls, ClntCtrls, 0, 0 ,&msg)

Result <0>: (null)

Matched DNs:

Getting 40 entries:

>> Dn: CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; container;

             1> cn: Deleted Objects;

             1> description: Default container for deleted objects;

             1> distinguishedName: CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: Deleted Objects;

             1> canonicalName: Nwtraders1.msft/Deleted Objects;

>> Dn: DC=..Deleted-_msdcs.Nwtraders1.msft\0ADEL:b94b8887-8d2a-456d-a6f8-d0d6d7081985,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsZone;

             1> distinguishedName: DC=..Deleted-_msdcs.Nwtraders1.msft\0ADEL:b94b8887-8d2a-456d-a6f8-d0d6d7081985,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: ..Deleted-_msdcs.Nwtraders1.msft

DEL:b94b8887-8d2a-456d-a6f8-d0d6d7081985;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/..Deleted-_msdcs.Nwtraders1.msft

DEL:b94b8887-8d2a-456d-a6f8-d0d6d7081985;

             1> dc: ..Deleted-_msdcs.Nwtraders1.msft

DEL:b94b8887-8d2a-456d-a6f8-d0d6d7081985;

>> Dn: DC=@\0ADEL:79bb633a-78a2-4192-9c46-bc9d53ca2fcc,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=@\0ADEL:79bb633a-78a2-4192-9c46-bc9d53ca2fcc,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: @

DEL:79bb633a-78a2-4192-9c46-bc9d53ca2fcc;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/@

DEL:79bb633a-78a2-4192-9c46-bc9d53ca2fcc;

             1> dc: @

DEL:79bb633a-78a2-4192-9c46-bc9d53ca2fcc;

>> Dn: DC=..Deleted-Nwtraders1.msft\0ADEL:44da3dbd-c0fd-4c3e-a322-f494fce9d65a,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsZone;

             1> distinguishedName: DC=..Deleted-Nwtraders1.msft\0ADEL:44da3dbd-c0fd-4c3e-a322-f494fce9d65a,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: ..Deleted-Nwtraders1.msft

DEL:44da3dbd-c0fd-4c3e-a322-f494fce9d65a;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/..Deleted-Nwtraders1.msft

DEL:44da3dbd-c0fd-4c3e-a322-f494fce9d65a;

             1> dc: ..Deleted-Nwtraders1.msft

DEL:44da3dbd-c0fd-4c3e-a322-f494fce9d65a;

>> Dn: DC=@\0ADEL:1fb50f2a-6dd4-4d1c-876c-9661b8c03f7c,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=@\0ADEL:1fb50f2a-6dd4-4d1c-876c-9661b8c03f7c,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: @

DEL:1fb50f2a-6dd4-4d1c-876c-9661b8c03f7c;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/@

DEL:1fb50f2a-6dd4-4d1c-876c-9661b8c03f7c;

             1> dc: @

DEL:1fb50f2a-6dd4-4d1c-876c-9661b8c03f7c;

>> Dn: DC=_msdcs\0ADEL:cfd8338c-fe4f-485c-bf96-14fd0c2435dc,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_msdcs\0ADEL:cfd8338c-fe4f-485c-bf96-14fd0c2435dc,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _msdcs

DEL:cfd8338c-fe4f-485c-bf96-14fd0c2435dc;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_msdcs

DEL:cfd8338c-fe4f-485c-bf96-14fd0c2435dc;

             1> dc: _msdcs

DEL:cfd8338c-fe4f-485c-bf96-14fd0c2435dc;

>> Dn: DC=vancouver\0ADEL:3eeb5f22-5d2d-4426-bfef-084b3a5b7553,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=vancouver\0ADEL:3eeb5f22-5d2d-4426-bfef-084b3a5b7553,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: vancouver

DEL:3eeb5f22-5d2d-4426-bfef-084b3a5b7553;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/vancouver

DEL:3eeb5f22-5d2d-4426-bfef-084b3a5b7553;

             1> dc: vancouver

DEL:3eeb5f22-5d2d-4426-bfef-084b3a5b7553;

>> Dn: DC=_ldap._tcp\0ADEL:9c6890da-7f4b-48e9-a766-4ac0f3b8c2ce,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp\0ADEL:9c6890da-7f4b-48e9-a766-4ac0f3b8c2ce,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp

DEL:9c6890da-7f4b-48e9-a766-4ac0f3b8c2ce;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp

DEL:9c6890da-7f4b-48e9-a766-4ac0f3b8c2ce;

             1> dc: _ldap._tcp

DEL:9c6890da-7f4b-48e9-a766-4ac0f3b8c2ce;

>> Dn: DC=_ldap._tcp.Default-First-Site-Name._sites\0ADEL:72a88c08-7f4e-4ad5-bd09-54624c5d380e,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.Default-First-Site-Name._sites\0ADEL:72a88c08-7f4e-4ad5-bd09-54624c5d380e,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.Default-First-Site-Name._sites

DEL:72a88c08-7f4e-4ad5-bd09-54624c5d380e;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.Default-First-Site-Name._sites

DEL:72a88c08-7f4e-4ad5-bd09-54624c5d380e;

             1> dc: _ldap._tcp.Default-First-Site-Name._sites

DEL:72a88c08-7f4e-4ad5-bd09-54624c5d380e;

>> Dn: DC=_ldap._tcp.pdc\0ADEL:19158968-5653-4ac2-afbd-bdc9818b9721,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.pdc\0ADEL:19158968-5653-4ac2-afbd-bdc9818b9721,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.pdc

DEL:19158968-5653-4ac2-afbd-bdc9818b9721;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.pdc

DEL:19158968-5653-4ac2-afbd-bdc9818b9721;

             1> dc: _ldap._tcp.pdc

DEL:19158968-5653-4ac2-afbd-bdc9818b9721;

>> Dn: DC=_ldap._tcp.2ed1f9fc-f6ef-4e1d-b1b6-956b1c660cf4.domains\0ADEL:ec278736-d1ea-494f-ad92-1a536e2b7b07,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.2ed1f9fc-f6ef-4e1d-b1b6-956b1c660cf4.domains\0ADEL:ec278736-d1ea-494f-ad92-1a536e2b7b07,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.2ed1f9fc-f6ef-4e1d-b1b6-956b1c660cf4.domains

DEL:ec278736-d1ea-494f-ad92-1a536e2b7b07;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.2ed1f9fc-f6ef-4e1d-b1b6-956b1c660cf4.domains

DEL:ec278736-d1ea-494f-ad92-1a536e2b7b07;

             1> dc: _ldap._tcp.2ed1f9fc-f6ef-4e1d-b1b6-956b1c660cf4.domains

DEL:ec278736-d1ea-494f-ad92-1a536e2b7b07;

>> Dn: DC=49822c67-976d-42c0-8e15-03854d35c59d\0ADEL:9f850cb1-8774-4220-858e-360ac6384f56,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=49822c67-976d-42c0-8e15-03854d35c59d\0ADEL:9f850cb1-8774-4220-858e-360ac6384f56,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: 49822c67-976d-42c0-8e15-03854d35c59d

DEL:9f850cb1-8774-4220-858e-360ac6384f56;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/49822c67-976d-42c0-8e15-03854d35c59d

DEL:9f850cb1-8774-4220-858e-360ac6384f56;

             1> dc: 49822c67-976d-42c0-8e15-03854d35c59d

DEL:9f850cb1-8774-4220-858e-360ac6384f56;

>> Dn: DC=_ldap._tcp.dc\0ADEL:241bdaf1-c5cc-4fb9-b0e2-1167e58ca5ef,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.dc\0ADEL:241bdaf1-c5cc-4fb9-b0e2-1167e58ca5ef,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.dc

DEL:241bdaf1-c5cc-4fb9-b0e2-1167e58ca5ef;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.dc

DEL:241bdaf1-c5cc-4fb9-b0e2-1167e58ca5ef;

             1> dc: _ldap._tcp.dc

DEL:241bdaf1-c5cc-4fb9-b0e2-1167e58ca5ef;

>> Dn: DC=_ldap._tcp.Default-First-Site-Name._sites.dc\0ADEL:d1a72760-b13c-42f8-b9c1-ef76f74043ae,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.Default-First-Site-Name._sites.dc\0ADEL:d1a72760-b13c-42f8-b9c1-ef76f74043ae,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.Default-First-Site-Name._sites.dc

DEL:d1a72760-b13c-42f8-b9c1-ef76f74043ae;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.Default-First-Site-Name._sites.dc

DEL:d1a72760-b13c-42f8-b9c1-ef76f74043ae;

             1> dc: _ldap._tcp.Default-First-Site-Name._sites.dc

DEL:d1a72760-b13c-42f8-b9c1-ef76f74043ae;

>> Dn: DC=_ldap._tcp.gc\0ADEL:70b7b78e-f9f3-4863-8a79-7c4c3ec5504b,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.gc\0ADEL:70b7b78e-f9f3-4863-8a79-7c4c3ec5504b,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.gc

DEL:70b7b78e-f9f3-4863-8a79-7c4c3ec5504b;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.gc

DEL:70b7b78e-f9f3-4863-8a79-7c4c3ec5504b;

             1> dc: _ldap._tcp.gc

DEL:70b7b78e-f9f3-4863-8a79-7c4c3ec5504b;

>> Dn: DC=_ldap._tcp.Default-First-Site-Name._sites.gc\0ADEL:9479c38a-390d-4b81-9c95-6f5cd01b1903,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.Default-First-Site-Name._sites.gc\0ADEL:9479c38a-390d-4b81-9c95-6f5cd01b1903,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.Default-First-Site-Name._sites.gc

DEL:9479c38a-390d-4b81-9c95-6f5cd01b1903;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.Default-First-Site-Name._sites.gc

DEL:9479c38a-390d-4b81-9c95-6f5cd01b1903;

             1> dc: _ldap._tcp.Default-First-Site-Name._sites.gc

DEL:9479c38a-390d-4b81-9c95-6f5cd01b1903;

>> Dn: DC=gc\0ADEL:d279b17e-913c-49d9-9431-3dea0e7b4e47,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=gc\0ADEL:d279b17e-913c-49d9-9431-3dea0e7b4e47,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: gc

DEL:d279b17e-913c-49d9-9431-3dea0e7b4e47;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/gc

DEL:d279b17e-913c-49d9-9431-3dea0e7b4e47;

             1> dc: gc

DEL:d279b17e-913c-49d9-9431-3dea0e7b4e47;

>> Dn: DC=_kerberos._tcp.dc\0ADEL:b38ee960-bf35-404b-840c-0b0cb1b18b48,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_kerberos._tcp.dc\0ADEL:b38ee960-bf35-404b-840c-0b0cb1b18b48,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _kerberos._tcp.dc

DEL:b38ee960-bf35-404b-840c-0b0cb1b18b48;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_kerberos._tcp.dc

DEL:b38ee960-bf35-404b-840c-0b0cb1b18b48;

             1> dc: _kerberos._tcp.dc

DEL:b38ee960-bf35-404b-840c-0b0cb1b18b48;

>> Dn: DC=_kerberos._tcp.Default-First-Site-Name._sites.dc\0ADEL:e584bca8-eecd-4099-8c98-857c343f73f0,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_kerberos._tcp.Default-First-Site-Name._sites.dc\0ADEL:e584bca8-eecd-4099-8c98-857c343f73f0,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _kerberos._tcp.Default-First-Site-Name._sites.dc

DEL:e584bca8-eecd-4099-8c98-857c343f73f0;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_kerberos._tcp.Default-First-Site-Name._sites.dc

DEL:e584bca8-eecd-4099-8c98-857c343f73f0;

             1> dc: _kerberos._tcp.Default-First-Site-Name._sites.dc

DEL:e584bca8-eecd-4099-8c98-857c343f73f0;

>> Dn: DC=_kerberos._tcp\0ADEL:7d97c964-745e-4131-bc46-03af4735b35a,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_kerberos._tcp\0ADEL:7d97c964-745e-4131-bc46-03af4735b35a,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _kerberos._tcp

DEL:7d97c964-745e-4131-bc46-03af4735b35a;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_kerberos._tcp

DEL:7d97c964-745e-4131-bc46-03af4735b35a;

             1> dc: _kerberos._tcp

DEL:7d97c964-745e-4131-bc46-03af4735b35a;

>> Dn: DC=_kerberos._tcp.Default-First-Site-Name._sites\0ADEL:96a76f58-2408-4ba9-9a78-ae2e3df97df7,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_kerberos._tcp.Default-First-Site-Name._sites\0ADEL:96a76f58-2408-4ba9-9a78-ae2e3df97df7,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _kerberos._tcp.Default-First-Site-Name._sites

DEL:96a76f58-2408-4ba9-9a78-ae2e3df97df7;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_kerberos._tcp.Default-First-Site-Name._sites

DEL:96a76f58-2408-4ba9-9a78-ae2e3df97df7;

             1> dc: _kerberos._tcp.Default-First-Site-Name._sites

DEL:96a76f58-2408-4ba9-9a78-ae2e3df97df7;

>> Dn: DC=_gc._tcp\0ADEL:ec128413-fdc2-4db1-9824-63910235348d,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_gc._tcp\0ADEL:ec128413-fdc2-4db1-9824-63910235348d,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _gc._tcp

DEL:ec128413-fdc2-4db1-9824-63910235348d;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_gc._tcp

DEL:ec128413-fdc2-4db1-9824-63910235348d;

             1> dc: _gc._tcp

DEL:ec128413-fdc2-4db1-9824-63910235348d;

>> Dn: DC=_gc._tcp.Default-First-Site-Name._sites\0ADEL:e62c1f46-5595-433a-897d-e9d91ff15149,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_gc._tcp.Default-First-Site-Name._sites\0ADEL:e62c1f46-5595-433a-897d-e9d91ff15149,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _gc._tcp.Default-First-Site-Name._sites

DEL:e62c1f46-5595-433a-897d-e9d91ff15149;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_gc._tcp.Default-First-Site-Name._sites

DEL:e62c1f46-5595-433a-897d-e9d91ff15149;

             1> dc: _gc._tcp.Default-First-Site-Name._sites

DEL:e62c1f46-5595-433a-897d-e9d91ff15149;

>> Dn: DC=_kerberos._udp\0ADEL:d5c089e6-111b-491b-8bfd-e38863ed8e46,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_kerberos._udp\0ADEL:d5c089e6-111b-491b-8bfd-e38863ed8e46,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _kerberos._udp

DEL:d5c089e6-111b-491b-8bfd-e38863ed8e46;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_kerberos._udp

DEL:d5c089e6-111b-491b-8bfd-e38863ed8e46;

             1> dc: _kerberos._udp

DEL:d5c089e6-111b-491b-8bfd-e38863ed8e46;

>> Dn: DC=_kpasswd._tcp\0ADEL:c164a266-16e5-4e1a-a68b-f99d09937293,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_kpasswd._tcp\0ADEL:c164a266-16e5-4e1a-a68b-f99d09937293,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _kpasswd._tcp

DEL:c164a266-16e5-4e1a-a68b-f99d09937293;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_kpasswd._tcp

DEL:c164a266-16e5-4e1a-a68b-f99d09937293;

             1> dc: _kpasswd._tcp

DEL:c164a266-16e5-4e1a-a68b-f99d09937293;

>> Dn: DC=_kpasswd._udp\0ADEL:fa75ccf3-7ad8-48fa-aeff-cf380495b05f,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_kpasswd._udp\0ADEL:fa75ccf3-7ad8-48fa-aeff-cf380495b05f,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _kpasswd._udp

DEL:fa75ccf3-7ad8-48fa-aeff-cf380495b05f;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_kpasswd._udp

DEL:fa75ccf3-7ad8-48fa-aeff-cf380495b05f;

             1> dc: _kpasswd._udp

DEL:fa75ccf3-7ad8-48fa-aeff-cf380495b05f;

>> Dn: DC=DomainDnsZones\0ADEL:596cff40-995d-42a2-9127-48d26dfd19fa,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=DomainDnsZones\0ADEL:596cff40-995d-42a2-9127-48d26dfd19fa,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: DomainDnsZones

DEL:596cff40-995d-42a2-9127-48d26dfd19fa;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/DomainDnsZones

DEL:596cff40-995d-42a2-9127-48d26dfd19fa;

             1> dc: DomainDnsZones

DEL:596cff40-995d-42a2-9127-48d26dfd19fa;

>> Dn: DC=_ldap._tcp.DomainDnsZones\0ADEL:ea1541ef-dcee-41f4-9b16-96f226ffaa9a,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.DomainDnsZones\0ADEL:ea1541ef-dcee-41f4-9b16-96f226ffaa9a,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.DomainDnsZones

DEL:ea1541ef-dcee-41f4-9b16-96f226ffaa9a;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.DomainDnsZones

DEL:ea1541ef-dcee-41f4-9b16-96f226ffaa9a;

             1> dc: _ldap._tcp.DomainDnsZones

DEL:ea1541ef-dcee-41f4-9b16-96f226ffaa9a;

>> Dn: DC=_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones\0ADEL:5df8b3c6-f902-4e8f-bf56-a3da50b9b67d,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones\0ADEL:5df8b3c6-f902-4e8f-bf56-a3da50b9b67d,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones

DEL:5df8b3c6-f902-4e8f-bf56-a3da50b9b67d;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones

DEL:5df8b3c6-f902-4e8f-bf56-a3da50b9b67d;

             1> dc: _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones

DEL:5df8b3c6-f902-4e8f-bf56-a3da50b9b67d;

>> Dn: DC=ForestDnsZones\0ADEL:11db86f6-8d73-4491-b0c4-d221f34df4db,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=ForestDnsZones\0ADEL:11db86f6-8d73-4491-b0c4-d221f34df4db,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: ForestDnsZones

DEL:11db86f6-8d73-4491-b0c4-d221f34df4db;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/ForestDnsZones

DEL:11db86f6-8d73-4491-b0c4-d221f34df4db;

             1> dc: ForestDnsZones

DEL:11db86f6-8d73-4491-b0c4-d221f34df4db;

>> Dn: DC=_ldap._tcp.ForestDnsZones\0ADEL:f538cf39-9ea0-438f-9eb3-6bac80d7f871,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.ForestDnsZones\0ADEL:f538cf39-9ea0-438f-9eb3-6bac80d7f871,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.ForestDnsZones

DEL:f538cf39-9ea0-438f-9eb3-6bac80d7f871;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.ForestDnsZones

DEL:f538cf39-9ea0-438f-9eb3-6bac80d7f871;

             1> dc: _ldap._tcp.ForestDnsZones

DEL:f538cf39-9ea0-438f-9eb3-6bac80d7f871;

>> Dn: DC=_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones\0ADEL:0e0ac776-b69e-4a8d-9da6-2786de77386d,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             2> objectClass: top; dnsNode;

             1> distinguishedName: DC=_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones\0ADEL:0e0ac776-b69e-4a8d-9da6-2786de77386d,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones

DEL:0e0ac776-b69e-4a8d-9da6-2786de77386d;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones

DEL:0e0ac776-b69e-4a8d-9da6-2786de77386d;

             1> dc: _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones

DEL:0e0ac776-b69e-4a8d-9da6-2786de77386d;

>> Dn: CN=174a959bddf9460db7d6dbd12cb2c55d\0ADEL:3cf99e44-40c0-4c8f-a6b6-1c5fd68f4dc2,CN=Infrastructure,DC=Nwtraders1,DC=msft

             2> objectClass: top; infrastructureUpdate;

             1> cn: 174a959bddf9460db7d6dbd12cb2c55d

DEL:3cf99e44-40c0-4c8f-a6b6-1c5fd68f4dc2;

             1> distinguishedName: CN=174a959bddf9460db7d6dbd12cb2c55d\0ADEL:3cf99e44-40c0-4c8f-a6b6-1c5fd68f4dc2,CN=Infrastructure,DC=Nwtraders1,DC=msft;

             1> name: 174a959bddf9460db7d6dbd12cb2c55d

DEL:3cf99e44-40c0-4c8f-a6b6-1c5fd68f4dc2;

             1> canonicalName: Nwtraders1.msft/Infrastructure/174a959bddf9460db7d6dbd12cb2c55d

DEL:3cf99e44-40c0-4c8f-a6b6-1c5fd68f4dc2;

>> Dn: CN=Brenda\0ADEL:3659b11e-a4fa-43ae-85ae-bc276dea9a7e,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             4> objectClass: top; person; organizationalPerson; user;

             1> cn: Brenda

DEL:3659b11e-a4fa-43ae-85ae-bc276dea9a7e;

             1> distinguishedName: CN=Brenda\0ADEL:3659b11e-a4fa-43ae-85ae-bc276dea9a7e,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: Brenda

DEL:3659b11e-a4fa-43ae-85ae-bc276dea9a7e;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/Brenda

DEL:3659b11e-a4fa-43ae-85ae-bc276dea9a7e;

>> Dn: CN=Brenda\0ADEL:a0fa9bb8-fada-4333-baca-0ab494d27b4e,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             4> objectClass: top; person; organizationalPerson; user;

             1> cn: Brenda

DEL:a0fa9bb8-fada-4333-baca-0ab494d27b4e;

             1> distinguishedName: CN=Brenda\0ADEL:a0fa9bb8-fada-4333-baca-0ab494d27b4e,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: Brenda

DEL:a0fa9bb8-fada-4333-baca-0ab494d27b4e;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/Brenda

DEL:a0fa9bb8-fada-4333-baca-0ab494d27b4e;

>> Dn: CN=Brenda\0ADEL:f61cb26f-8b5b-4413-98d9-bd1b49ef3890,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             4> objectClass: top; person; organizationalPerson; user;

             1> cn: Brenda

DEL:f61cb26f-8b5b-4413-98d9-bd1b49ef3890;

             1> distinguishedName: CN=Brenda\0ADEL:f61cb26f-8b5b-4413-98d9-bd1b49ef3890,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: Brenda

DEL:f61cb26f-8b5b-4413-98d9-bd1b49ef3890;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/Brenda

DEL:f61cb26f-8b5b-4413-98d9-bd1b49ef3890;

>> Dn: CN=Brenda\0ADEL:b00eb72b-2995-4b7d-b6fa-5ef3cdafc657,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             4> objectClass: top; person; organizationalPerson; user;

             1> cn: Brenda

DEL:b00eb72b-2995-4b7d-b6fa-5ef3cdafc657;

             1> distinguishedName: CN=Brenda\0ADEL:b00eb72b-2995-4b7d-b6fa-5ef3cdafc657,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: Brenda

DEL:b00eb72b-2995-4b7d-b6fa-5ef3cdafc657;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/Brenda

DEL:b00eb72b-2995-4b7d-b6fa-5ef3cdafc657;

>> Dn: CN=Brenda\0ADEL:b3705cea-46e7-43be-92be-883eec33695d,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             4> objectClass: top; person; organizationalPerson; user;

             1> cn: Brenda

DEL:b3705cea-46e7-43be-92be-883eec33695d;

             1> distinguishedName: CN=Brenda\0ADEL:b3705cea-46e7-43be-92be-883eec33695d,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: Brenda

DEL:b3705cea-46e7-43be-92be-883eec33695d;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/Brenda

DEL:b3705cea-46e7-43be-92be-883eec33695d;

>> Dn: CN=Brenda\0ADEL:d239a309-be3b-42b4-b809-4fdf4bb32fe9,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             4> objectClass: top; person; organizationalPerson; user;

             1> cn: Brenda

DEL:d239a309-be3b-42b4-b809-4fdf4bb32fe9;

             1> distinguishedName: CN=Brenda\0ADEL:d239a309-be3b-42b4-b809-4fdf4bb32fe9,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: Brenda

DEL:d239a309-be3b-42b4-b809-4fdf4bb32fe9;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/Brenda

DEL:d239a309-be3b-42b4-b809-4fdf4bb32fe9;

>> Dn: CN=Brenda\0ADEL:1cbb7c7e-b789-45b8-b8a3-a382e288b143,CN=Deleted Objects,DC=Nwtraders1,DC=msft

             4> objectClass: top; person; organizationalPerson; user;

             1> cn: Brenda

DEL:1cbb7c7e-b789-45b8-b8a3-a382e288b143;

             1> distinguishedName: CN=Brenda\0ADEL:1cbb7c7e-b789-45b8-b8a3-a382e288b143,CN=Deleted Objects,DC=Nwtraders1,DC=msft;

             1> name: Brenda

DEL:1cbb7c7e-b789-45b8-b8a3-a382e288b143;

             1> canonicalName: Nwtraders1.msft/Deleted Objects/Brenda

DEL:1cbb7c7e-b789-45b8-b8a3-a382e288b143;



Writren by  kwangjin kim