Ldifde.exe may not export objects from Active Directory in Windows Server 2003 or Windows 2000 (886211)


The information in this article applies to:

  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, 64-Bit Enterprise Edition
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server

SYMPTOMS

In Microsoft Windows Server 2003 or Microsoft Windows 2000, when you try to export objects from the Active Directory directory service by using the Ldifde.exe command-line tool, objects are not exported.

For example, suppose DC1.Root.com is a global catalog server in the root domain. On a member server that is located in the Child1 child domain, you type the following command at a command prompt:

ldifde -d cn=administrator,cn=users,dc=child1,dc=root,dc=com -f admin.ldif

In this scenario, Ldifde.exe returns text that is similar to the following:
Connecting to "DC1.Root.com" 
Logging in as current user using SSPI 
Exporting directory to file admin.ldif
Searching for entries... 
Writing out entries 
No Entries found

The command has completed successfully

CAUSE

This problem occurs if all the following conditions are true:
  • You use Ldifde.exe to export objects from one domain to another domain in a forest.
  • Your user account and the computer where you are running Ldifde.exe are located in one domain, and the domain controller that stores the global catalog is located in a different domain.
  • You do not specify the -s ServerName parameter when you run Ldifde.exe.
If you do not specify the -s ServerName parameter when you use Ldifde.exe to export objects, Ldifde.exe connects to nearest domain controller that stores the global catalog. By default, when you use Ldifde.exe to import objects, Ldifde.exe connects to the domain controller that is located in the same domain where your computer is located. However, when you use Ldifde.exe to export objects, Ldifde.exe connects to the nearest global catalog server in the forest.

WORKAROUND

To work around this problem, use Ldifde.exe with the -s ServerName parameter to specify the name of the domain controller in the domain where the object that you want to export is located.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies To" section.

MORE INFORMATION

For additional information about how to use the Ldifde.exe tool, click the following article number to view the article in the Microsoft Knowledge Base:

237677 Using LDIFDE to import and export directory objects to Active Directory

For more information about Ldifde.exe, visit the following Microsoft Web site:

http://technet2.microsoft.com/windowsserver/en/library/32872283-3722-4D9B-925A-82C516A1CA141033.mspx

Modification Type:MajorLast Reviewed:6/21/2006
Keywords:kbtshoot kbnofix kbBug kbwinservds kbActiveDirectory KB886211 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.