Microsoft KB Archive/886211

= Ldifde.exe may not export objects from Active Directory in Windows Server 2003 or Windows 2000 =

Article ID: 886211

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server

-





SYMPTOMS
In Microsoft Windows Server 2003 or Microsoft Windows 2000, when you try to export objects from the Active Directory directory service by using the Ldifde.exe command-line tool, objects are not exported.

For example, suppose DC1.Root.com is a global catalog server in the root domain. On a member server that is located in the Child1 child domain, you type the following command at a command prompt:

ldifde -d cn=administrator,cn=users,dc=child1,dc=root,dc=com -f admin.ldif

In this scenario, Ldifde.exe returns text that is similar to the following: Connecting to &quot;DC1.Root.com&quot; Logging in as current user using SSPI Exporting directory to file admin.ldif Searching for entries... Writing out entries No Entries found

The command has completed successfully



CAUSE
This problem occurs if all the following conditions are true:
 * You use Ldifde.exe to export objects from one domain to another domain in a forest.
 * Your user account and the computer where you are running Ldifde.exe are located in one domain, and the domain controller that stores the global catalog is located in a different domain.
 * You do not specify the -s  parameter when you run Ldifde.exe.

If you do not specify the -s  parameter when you use Ldifde.exe to export objects, Ldifde.exe connects to nearest domain controller that stores the global catalog. By default, when you use Ldifde.exe to import objects, Ldifde.exe connects to the domain controller that is located in the same domain where your computer is located. However, when you use Ldifde.exe to export objects, Ldifde.exe connects to the nearest global catalog server in the forest.



WORKAROUND
To work around this problem, use Ldifde.exe with the -s  parameter to specify the name of the domain controller in the domain where the object that you want to export is located.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies To&quot; section.



MORE INFORMATION
For additional information about how to use the Ldifde.exe tool, click the following article number to view the article in the Microsoft Knowledge Base:

237677 Using LDIFDE to import and export directory objects to Active Directory

For more information about Ldifde.exe, visit the following Microsoft Web site:

http://technet2.microsoft.com/windowsserver/en/library/32872283-3722-4D9B-925A-82C516A1CA141033.mspx

Keywords: kbtshoot kbnofix kbbug kbwinservds kbactivedirectory KB886211

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.