If a domain controller remains disconnected for a longer period than the tombstone lifetime, an object that has been deleted from the directory can remain on the disconnected domain controller. For this reason, such objects are called lingering objects.

Duplicate Object Present Error

The duplicate object present event ID: 1083 error occurs when a duplicate object is present locally, or when the local domain controller cannot apply updates received from replica domain controller on duplicate object.

  1. Get the IP address of the replica domain controller.
  2. Locate the duplicate object on the replica domain controller.
  3. Delete the found duplicate object on the replica domain controller.

- or -

  1. Move the found non-duplicate object to another organizational unit (if this is not a duplicate object).
  2. Replicate inbound.
  3. Investigate possible replicate latency issues.

Object Name Conflict Error

Active Directory directory service supports multimaster replication of directory objects between all domain controllers in the domain. When replication of objects results in name conflicts (two objects have the same name within the same container), the system automatically renames one of these accounts to a unique name. For example, object ABC is renamed to be *CNF:guid, where * represents a reserved character, CNF is a constant that indicates a conflict resolution, and GUID represents a printable representation of the objectGuid attribute value.

This will cause an event ID 12292 to be logged in the system event log on the domain controller. You must clean up Active Directory to resolve this error.

Caution:
If you find collisions in the Domain Controllers OU, stop. Continuing with the procedure below can cause further damage. Visit Microsoft Help and Support for guidance.
  1. Take note of the conflicting account objects. In Active Directory Users and Computers, delete the appropriate conflicting account objects (usually the newer one) on a domain controller in the domain that contains the accounts.
  2. Rename the client computers whose accounts were deleted and join them to the domain.
  3. Right-click My Computer.
  4. In the System Properties dialog box, on the Computer Name tab, click Change.
  5. In the Computer Name Changes dialog box, in the Computer name box, enter a new name.
  6. Click OK to exit the Computer Name Changes dialog box, and then click OK to exit the System Properties dialog box.
  7. Restart the computer.
  8. Verify that replication is functioning properly. If replication is not functioning properly, see the other lessons in this section. If it is, review and revise your operational procedures to ensure that object creations and deletions are coordinated.