Environment
NetIQ Directory and Resource Administrator 8.x
Situation
NetIQ Directory and Resource Administrator (DRA) allows DRA
Assistant Admins (AA) to use DRA Recycle bin instead of immediately permanently deleting objects. Sometimes an AA will receive an Error ‘There is no such object on the server’, when trying to move an object into the DRA Recycle Bin.
Resolution
To resolve this issue, use Microsoft Active Directory Users and Computers to delete any Security Group objects whose description matches the target object. These Security Group Objects will be located in a hidden OU, named NetIQRecycleBin. After those objects are deleted, the target object can be moved into the DRA Recycle bin.
Cause
When DRA places an object in the DRA Recycle bin, a new object of type Security Group – Global is created in the Hidden OU of NetIQReycleBin. The DRA Server will also move the original object from its original location into the Hidden OU. Active Directory will not allow two objects of the same exact name to exist in the same OU. If the NetIQReycleBin OU already contains a security group object, DRA is unable to create a new one with the same name. The failure to create will cause DRA to report an error.
DRA creates the secondary object to store the following information (if a restore of the object is ever to occur):
-
Original location in AD (full path to source OU or Container)
-
Group membership
-
Exchange Mailbox information
-
SID of the object