A Link which might help further understanding
Thanks for your responses to the other questions, its very helpful.
1. It's nothing to do with the server version - it's simply because the change value for the user differs between servers, and in this case the server you moved to has lower change values than the server you moved from.
It must be all our 2008 servers have lower change values than our 2003 ones?
3. Resetting it for everyone will cause a one time glut in traffic as the connector resyncs them all - it would be better if you just mine the log for users with this error message and reset them only.
I've search the log and it's affecting every single user unless they are disabled. As soon as i switch back to any of our 2003 servers the issue does not occur. Every 2008 server the issue appears, have you seen this before?
Thanks in advance.
As they are newer, I expect yes you'd see this one all of them - the change value starts at 0 and is incremented every time something changes the user record in AD on that server. The more changes, the higher the value.
I'm not sure if I am explaining myself correctly - each server maintains its own unique counter for each record - as that record changes, the counter increments. This counter is NEVER replicated between servers.
So, if you point EEM's connector manager at a different server, it's pot luck whether the change values are greater, smaller, or the same. If they are smaller, the record will not sync until they are incremented past the last value EEM saw in the previous server.
Ok thanks for your help today
I will have to run a script to change all the change values to 0 for all users in the standard group.
I'm looking for a script to reset the value to 0 for all 2000+ users in a single group. Does McAfee have an offical script or KB for this?
I need to run a script to reset the change value to an entire group of 2043 users. What is the best way of achieving this? Can i do this with the linkuser?
You could, but it would probably be better to create your own script to do just that one function.
Do McAfee have a KB article or script template to achieve this as i'm not sure how to achieve this from scratch?
You need to use the API to change the binding value - that command is documented in the SBAdmCL scripting guide you got with the product. Otherwise you can use whatever language you are most familier with, even a batch file to do it.
Your McAfee representative can probably connect you to prof services to do this as well, or you might be able to get your platinum support / RSAM to write it for you.