# upgradeprovision --full --debugall Find last provision USN, 1 invocation(s) for a total of 10 ranges rootdn :DC=example,DC=com configdn :CN=Configuration,DC=example,DC=com schemadn :CN=Schema,CN=Configuration,DC=example,DC=com serverdn :CN=SAMBA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=com netbiosname :SAMBA defaultsite :Default-First-Site-Name dnsdomain :example.com hostname :samba domain :EXAMPLE realm :EXAMPLE.COM invocationid:41d05704-031f-49cd-aeae-ff922ce8de7e policyguid :46664FCB-185E-4F2F-89E3-9EE5DEDAF20D policyguiddc:E90D2E0A-CF02-4D28-8E30-82EE5FB19B59 domainsid :S-1-5-21-1669749161-1492036150-3562756080 domainguid :34a3e504-14b5-4a46-9cb0-453e59f3663a ntdsguid :1048d19d-df8d-4f37-ac9f-3727ce73b028 domainlevel :2 Creating a reference provision No IPv6 address will be assigned Copy privilege Provisioned by SAMBA 4.0.0alpha12-GIT-6d97360, upgrade to 4.0.0alpha12-GIT-77b9b97, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c Update base samdb by searching difference with reference one Starting update of samdb There are 2 missing objects Object CN=e83daa04-ca41-468f-9c69-4d08cae983e3,CN=Partitions,CN=Configuration,DC=example,DC=com will be added Object CN=ecce2cac-d76f-408a-8bf8-067d32debecd,CN=Partitions,CN=Configuration,DC=example,DC=com will be added Not applying delta to @ATTRIBUTES because there is not only add Reloading a merged schema, which might trigger reindexing so please be patient Schema reloaded! Using replPropertyMetadata for change selection DC=example,DC=com Attribute: minPwdLength was not created/modified/deleted during a provision or upgradeprovision. Current usn: 6466. Doing nothing Attribute: pwdHistoryLength was not created/modified/deleted during a provision or upgradeprovision. Current usn: 6462. Doing nothing Attribute: pwdProperties was not created/modified/deleted during a provision or upgradeprovision. Current usn: 6468. Doing nothing CN=DisplaySpecifiers,CN=Configuration,DC=example,DC=com Attribute: systemFlags will be modified/deleted it was last modified during a provision. Current usn: 1766 CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Owner mismatch: SY (in ref) DA(in current) Group mismatch: SY (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (A;;RPLCLORC;;;AU) ACE is not present in the reference (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current Attribute: displayName will be modified/deleted it was last modified during a provision. Current usn: 3295 DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com sd are not identical: Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current CN={46664FCB-185E-4F2F-89E3-9EE5DEDAF20D},CN=Policies,CN=System,DC=example,DC=com Attribute: versionNumber will be modified/deleted it was last modified during a provision. Current usn: 3382 CN={E90D2E0A-CF02-4D28-8E30-82EE5FB19B59},CN=Policies,CN=System,DC=example,DC=com Attribute: versionNumber will be modified/deleted it was last modified during a provision. Current usn: 3385 CN=RID Manager$,CN=System,DC=example,DC=com Attribute: rIDAvailablePool was not created/modified/deleted during a provision or upgradeprovision. Current usn: 8552. Doing nothing DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: SY (in ref) DA(in current) Group mismatch: BA (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (A;CIID;LC;;;RU) ACE is not present in the reference (OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RPLCLORC;;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS) ACE is not present in the reference (OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA) ACE is not present in the reference (OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;S-1-5-21-2848215498-2472035911-1947525656-498) ACE is not present in the reference (OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD) ACE is not present in the reference (OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA) ACE is not present in the reference (OA;CIID;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ER) ACE is not present in the current (OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED) ACE is not present in the current Part sacl is different between reference and current here is the detail: (OU;CIIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD) ACE is not present in the reference (OU;CIIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD) ACE is not present in the reference CN=Infrastructure,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) CN=LostAndFound,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: SY (in ref) DA(in current) Group mismatch: SY (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (A;;RPLCLORC;;;AU) ACE is not present in the reference (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=@,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: SY (in ref) DA(in current) Group mismatch: BA (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;ED) ACE is not present in the reference (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=@,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_gc._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_gc._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_kerberos._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_kerberos._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_kerberos._udp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_kpasswd._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_kpasswd._udp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_msdcs,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=samba,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current CN=NTDS Quotas,DC=DomainDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: SY (in ref) DA(in current) Group mismatch: BA (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (A;CIID;LC;;;RU) ACE is not present in the reference (OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RPLCLORC;;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS) ACE is not present in the reference (OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA) ACE is not present in the reference (OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;S-1-5-21-2848215498-2472035911-1947525656-498) ACE is not present in the reference (OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD) ACE is not present in the reference (OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA) ACE is not present in the reference (OA;CIID;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ER) ACE is not present in the current (OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED) ACE is not present in the current Part sacl is different between reference and current here is the detail: (OU;CIIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD) ACE is not present in the reference (OU;CIIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD) ACE is not present in the reference CN=Infrastructure,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) CN=LostAndFound,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: SY (in ref) DA(in current) Group mismatch: SY (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (A;;RPLCLORC;;;AU) ACE is not present in the reference (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=1048d19d-df8d-4f37-ac9f-3727ce73b028,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=@,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_kerberos._tcp.Default-First-Site-Name._sites.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_kerberos._tcp.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.34a3e504-14b5-4a46-9cb0-453e59f3663a.domains,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.Default-First-Site-Name._sites.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.Default-First-Site-Name._sites.gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=_ldap._tcp.pdc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current DC=gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current CN=NTDS Quotas,DC=ForestDnsZones,DC=example,DC=com sd are not identical: Owner mismatch: LA (in ref) DA(in current) CN=SAMBA,OU=Domain Controllers,DC=example,DC=com Attribute: servicePrincipalName was not created/modified/deleted during a provision or upgradeprovision. Current usn: 3442. Doing nothing CN=RID Set,CN=SAMBA,OU=Domain Controllers,DC=example,DC=com Attribute: rIDAllocationPool was not created/modified/deleted during a provision or upgradeprovision. Current usn: 8553. Doing nothing Attribute: rIDUsedPool was not created/modified/deleted during a provision or upgradeprovision. Current usn: 8561. Doing nothing There are 0 changed objects Update of samdb finished Update of secrets.ldb Adding/Changing attribute msDS-KeyVersionNumber to flatname=EXAMPLE,cn=Primary Domains Adding/Changing attribute priorSecret to flatname=EXAMPLE,cn=Primary Domains Adding/Changing attribute priorWhenChanged to flatname=EXAMPLE,cn=Primary Domains Update machine account Some defaultSecurityDescriptors and/orsecurityDescriptor have changed, recalculating SD 72 DNs have been marked as needed to be recalculated, recalculating 72 due to inheritance Checking recalculated SDs On object CN=e83daa04-ca41-468f-9c69-4d08cae983e3,CN=Partitions,CN=Configuration,DC=example,DC=com ACL is different Owner mismatch: EA (in ref) SY(in current) Group mismatch: DU (in ref) SY(in current) On object CN=ecce2cac-d76f-408a-8bf8-067d32debecd,CN=Partitions,CN=Configuration,DC=example,DC=com ACL is different Owner mismatch: EA (in ref) SY(in current) Group mismatch: DU (in ref) SY(in current) On object DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object CN=Infrastructure,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) On object DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_ldap._tcp.ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_ldap._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_gc._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_kpasswd._udp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=@,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object CN=Infrastructure,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) On object DC=_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=1048d19d-df8d-4f37-ac9f-3727ce73b028,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=samba,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_ldap._tcp.DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object CN=LostAndFound,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) On object DC=_ldap._tcp.Default-First-Site-Name._sites.gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: SY (in ref) DA(in current) Group mismatch: SY (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (A;;RPLCLORC;;;AU) ACE is not present in the reference (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current On object CN=NTDS Quotas,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) On object DC=_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: SY (in ref) DA(in current) Group mismatch: SY (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (A;;RPLCLORC;;;AU) ACE is not present in the reference (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current On object DC=_ldap._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_kerberos._udp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_ldap._tcp.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_ldap._tcp.Default-First-Site-Name._sites.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=@,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object CN=LostAndFound,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) On object DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: SY (in ref) DA(in current) Group mismatch: BA (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;ED) ACE is not present in the reference (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: SY (in ref) DA(in current) Group mismatch: BA (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (A;CIID;LC;;;RU) ACE is not present in the reference (OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RPLCLORC;;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS) ACE is not present in the reference (OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA) ACE is not present in the reference (OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;S-1-5-21-2848215498-2472035911-1947525656-498) ACE is not present in the reference (OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD) ACE is not present in the reference (OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA) ACE is not present in the reference (OA;CIID;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ER) ACE is not present in the current (OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED) ACE is not present in the current On object CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Owner mismatch: SY (in ref) DA(in current) Group mismatch: SY (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (A;;RPLCLORC;;;AU) ACE is not present in the reference (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current (A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current On object DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: SY (in ref) DA(in current) Group mismatch: BA (in ref) DU(in current) Part dacl is different between reference and current here is the detail: (OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (A;CIID;LC;;;RU) ACE is not present in the reference (OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RPLCLORC;;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS) ACE is not present in the reference (OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference (OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA) ACE is not present in the reference (OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;S-1-5-21-2848215498-2472035911-1947525656-498) ACE is not present in the reference (OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD) ACE is not present in the reference (OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA) ACE is not present in the reference (OA;CIID;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference (OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference (OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ER) ACE is not present in the current (OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED) ACE is not present in the current On object DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_msdcs,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_kerberos._tcp.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_ldap._tcp.34a3e504-14b5-4a46-9cb0-453e59f3663a.domains,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_ldap._tcp.pdc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_kerberos._tcp.Default-First-Site-Name._sites.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_kerberos._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_gc._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_kpasswd._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_kerberos._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different Part dacl is different between reference and current here is the detail: (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=@,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=_ldap._tcp.gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object CN=NTDS Quotas,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) On object DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current On object DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different Owner mismatch: LA (in ref) DA(in current) Part dacl is different between reference and current here is the detail: (A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current (A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current Upgrade finished! Reopenning samdb to trigger reindexing if needed after modification Reindexing finished