User Deletion Changes UPN

ajay krishna 21 Reputation points
2021-09-28T18:10:41.373+00:00

Hi,

If a User is Deleted , that user will fall under the Deleted User Catagory , The Thing is when I view the Deleted Users found that the ObjectID is prefixed with UPN. Is there any particular reason for that. A better Explaination will be Appreciatable.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,562 questions
0 comments No comments
{count} votes

Accepted answer
  1. Jai Verma 461 Reputation points
    2021-09-28T18:46:52.483+00:00

    Hello,

    Are you referring to the AD object RDN change to \0ADEL:<ObjectGUID>?

    \0A is null terminator character.
    ObjectGUID is added because DeletedObject is single container( you can imagine like single OU). If I delete two object with same RDN but located in different OUs, once both will move to single OU and cause conflict. To maintain the uniqueness of RDN, original ObjectGUID is added.

    For example, we have two Objects

    CN=jai1,OU=test1,DC=contoso,DC=local
    CN=jai1,OU=test2,DC=contoso,DC=local

    Above objects have same RDN but in different LDAP path so, can co-exits. But when I delete both the objects, both will move to single container, DeletedObjects and than there will be no unqiueness in the LDAP path

    CN=jai1,CN=DeletedObjects,DC=contoso,DC=local
    CN=jai1,CN=DeletedObjects,DC=contoso,DC=local

    To avoid this conflict, Object GUIDs are added

    CN=jai\0ADEL:efc1ca9e-a5ec-4a29-97e11,CN=DeletedObjects,DC=contoso,DC=local
    CN=jai1\0ADEL:calcmw2,-bcd2e-3m87-12p12,CN=DeletedObjects,DC=contoso,DC=local

    0 comments No comments

0 additional answers

Sort by: Most helpful