How can the LDIFDE utility be used to troubleshoot migration issues, such as the following:
- Some of the objects were migrated successfully but some of them have failed.
- During migration I receive an error and some of the objects are not created or are not mail-enabled.
- Error reports the e-mail address or another attribute is already in use in target domain but I have no idea which objects can have the same attribute.
Possible error during migration: "Error 0x80131501. Uniqueness constraint violation."
To export attributes of a single object the following syntax can be used:
ldifde -f C:\Output.txt -d "CN=user,OU=usersOU,DC=domainname,DC=com"
where "CN=user,OU=usersOU,DC=domainname,DC=com" is the 'distinguishedName' value of the user
Example: ldifde -f C:\Output.txt -d "CN=john smith,OU=users,DC=targetdomain,DC=com"
In this example, a file Output.txt will be created and placed on C: drive.
Possible scenarios:
1. Entire AD can be exported and then a search for specific attributes can be performed through the exported file.
2. Information about two objects can be exported and then compared to find the difference.
LDIFDE can also be used to import and export directory objects into Active Directory, and to modify or delete objects.
For more information how LDIFDE can be used see the MS KB and this article:
http://support.microsoft.com/kb/q237677/
**Note: when performing LDIFDE queries, it is often advisable to use the service account that is being used with the Quest tool, this validates permissions during the process**
