3.1.1.7.2.2 Directory Updates

  • Article

Entries are added to the pdcChangeLog on select directory updates, specified here. The pdcChangeLog is maintained as a circular buffer—once an implementation-specific size limit (64K bytes) is exceeded, the least-recently-added entries are removed to make room for new entries.

If the following condition is TRUE during a directory update, then the following action occurs:

  1. Condition

    1. The update, create, or delete occurs within the domain NC (both for an originating and replicated update).

    2. The AD DS domain is in mixed mode.

    3. A condition listed in the Trigger Condition Tables (below) matches the update.

  2. Action

    • An entry is added to pdcChangeLog with the associated fields in the Trigger Condition Tables that satisfied condition (1.3). The remaining fields in the pdcChangeLog entry are as follows:

      1. If the objectSid attribute value of the object being updated has a domain prefix of the built-in domain SID, then DbIndex is 0x1; otherwise, DbIndex is 0x0.

      2. The SerialNumber field is set as follows:

        1. If DbIndex is 0x0, SamNT4ReplicationUSN is incremented by one and the resulting value is used for the SerialNumber field.

        2. If DbIndex is 0x1, BuiltinNT4ReplicationUSN is incremented by one and the resulting value is used for the SerialNumber field.

      3. The SID field is not specified.

Trigger Condition Tables: Database triggers for pdcChangeLog update.

  • Trigger Condition: An update occurs to one or more of the attributes specified in Table A on a domain object or built-in domain object.

    pdcChangeLog entry

    Field

    Value

    RelativeId

    0x0

    Flags

    CHANGELOG_SID

    DeltaType

    AddOrChangeDomain

  • Trigger Condition: A group object creation or update to one or more of the attributes specified in Table B occurs when the groupType attribute is GROUP_TYPE_ACCOUNT_GROUP.

    pdcChangeLog entry

    Field

    Value

    RelativeId

    RelativeId of the objectSid attribute value

    Flags

    CHANGELOG_SID

    DeltaType

    AddOrChangeGroup

    Name

    sAMAccountName attribute value

  • Trigger Condition: A group object creation or update to one or more of the attributes specified in Table B occurs when the groupType attribute is GROUP_TYPE_RESOURCE_GROUP.

    pdcChangeLog entry

    Field

    Value

    RelativeId

    RelativeId of the objectSid attribute value

    Flags

    CHANGELOG_SID

    DeltaType

    AddOrChangeAlias

    Name

    sAMAccountName attribute value

  • Trigger Condition: A user object creation or update to one of more of the attribute specified in Table C occurs.

    pdcChangeLog entry

    Field

    Value

    RelativeId

    RelativeId of the objectSid attribute value

    Flags

    CHANGELOG_SID

    DeltaType

    AddOrChangeUser

    Name

    sAMAccountName attribute value

  • Trigger Condition: A group object deletion whose groupType attribute value is GROUP_TYPE_ACCOUNT_GROUP occurs.

    pdcChangeLog entry

    Field

    Value

    RelativeId

    RelativeId of the objectSid attribute value

    Flags

    0x8

    DbType

    DeleteGroup

    Name

    sAMAccountName attribute value

  • Trigger Condition: A group object deletion whose groupType attribute value is GROUP_TYPE_RESOURCE_GROUP occurs.

    pdcChangeLog entry

    Field

    Value

    RelativeId

    RelativeId of the objectSid attribute value

    Flags

    CHANGELOG_SID

    DeltaType

    DeleteAlias

    Name

    sAMAccountName attribute value

  • Trigger Condition: A user object deletion occurs.

    pdcChangeLog entry

    Field

    Value

    RelativeId

    RelativeId of the objectSid attribute value

    Flags

    CHANGELOG_SID

    DeltaType

    DeleteUser

    Name

    sAMAccountName attribute value

Table A: Domain Attributes for NT4 Replication

Attributes

nTSecurityDescriptor

oEMInformation

minPwdLength

pwdHistoryLength

pwdProperties

maxPwdAge

minPwdAge

lockoutDuration

lockOutObservationWindow

lockoutThreshold

Table B: Group Attributes for NT4 Replication

Attributes

nTSecurityDescriptor

sAMAccountName

description

member

Table C: User Attributes for NT4 Replication

Attributes

sAMAccountName

displayName

primaryGroupID

description

comment

homeDirectory

homeDrive

scriptPath

profilePath

userWorkstations

logonHours

accountExpires

userAccountControl

userParameters

countryCode

codePage

pwdLastSet

unicodePwd

dBCSPwd

nTSecurityDescriptor

groupType