Home / server / Questions / 547471
Accepted
Chris Dale
Asked: 2013-10-22 00:32:46 +0800 CST

What does it mean when update sequence numbers, original and current, are always not equal?

  • 772

I have two domain controllers, one where the USN in question is always the same values (current and original), while the other one the original USN is roughly 6 numbers lower than the current value.

What does this mean? How could this potentially affect my applications?

Here is a screenshot of the original and current USN's differentiating: enter image description here

active-directory

1 Answers

  1. Best Answer

    Each Domain Controller holds a local USN counter that gets incremented by each write to the DC's database replica.

    A digression between Current and Original simply means that the object was changed since creation.

    You can inspect the USN at the last write time for each attribute on an object with repadmin.exe:

    repadmin /showobjmeta DC01 "CN=SomeObject,OU=Computers,DC=domain,DC=tld"

    Try this for size:

    1. Create a new user account object named "TestUser" in the users OU
    2. Inspect the output of /showobjmeta from each domain controller (USNs should vary by DC):
      repadmin /showobjmeta * "CN=TestUser,OU=Users,DC=domain,DC=tld"
    3. Make a change to an object attribute, "Description" is a great candidate
    4. Run repadmin /showobjmeta again - the description attribute will have a newer USN on all Domain Controllers that have received the update, as well as on the Domain Controller on which you performed the update. Non-updated attributes (see whenCreated and objectGUID for control) will still have the original USN

    Hope this makes sense

    • 2