Attachment 7230 Details for Bug 8669 – upgradeprovision --full --debugall

upgradeprovision --full --debugall

debugall.txt (text/plain), 77.25 KB, created by Michael Wood on 2012-01-05 11:00:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Michael Wood

Created: 2012-01-05 11:00:38 UTC

Size: 77.25 KB

patch

obsolete

># upgradeprovision --full --debugall
>Find last provision USN, 1 invocation(s) for a total of 10 ranges
>rootdn      :DC=example,DC=com
>configdn    :CN=Configuration,DC=example,DC=com
>schemadn    :CN=Schema,CN=Configuration,DC=example,DC=com
>serverdn    :CN=SAMBA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=com
>netbiosname :SAMBA
>defaultsite :Default-First-Site-Name
>dnsdomain   :example.com
>hostname    :samba
>domain      :EXAMPLE
>realm       :EXAMPLE.COM
>invocationid:41d05704-031f-49cd-aeae-ff922ce8de7e
>policyguid  :46664FCB-185E-4F2F-89E3-9EE5DEDAF20D
>policyguiddc:E90D2E0A-CF02-4D28-8E30-82EE5FB19B59
>domainsid   :S-1-5-21-1669749161-1492036150-3562756080
>domainguid  :34a3e504-14b5-4a46-9cb0-453e59f3663a
>ntdsguid    :1048d19d-df8d-4f37-ac9f-3727ce73b028
>domainlevel :2
>Creating a reference provision
>No IPv6 address will be assigned
>Copy privilege
>Provisioned by SAMBA 4.0.0alpha12-GIT-6d97360, upgrade to 4.0.0alpha12-GIT-77b9b97, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c, upgrade to 4.0.0alpha18-GIT-caff88c
>Update base samdb by searching difference with reference one
>Starting update of samdb
>There are 2 missing objects
>Object CN=e83daa04-ca41-468f-9c69-4d08cae983e3,CN=Partitions,CN=Configuration,DC=example,DC=com will be added
>Object CN=ecce2cac-d76f-408a-8bf8-067d32debecd,CN=Partitions,CN=Configuration,DC=example,DC=com will be added
>Not applying delta to @ATTRIBUTES because there is not only add
>Reloading a merged schema, which might trigger reindexing so please be patient
>Schema reloaded!
>Using replPropertyMetadata for change selection
>DC=example,DC=com
>Attribute: minPwdLength was not created/modified/deleted during a provision or upgradeprovision. Current usn: 6466. Doing nothing
>Attribute: pwdHistoryLength was not created/modified/deleted during a provision or upgradeprovision. Current usn: 6462. Doing nothing
>Attribute: pwdProperties was not created/modified/deleted during a provision or upgradeprovision. Current usn: 6468. Doing nothing
>CN=DisplaySpecifiers,CN=Configuration,DC=example,DC=com
>Attribute: systemFlags will be modified/deleted it was last modified during a provision. Current usn: 1766
>CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: SY (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPLCLORC;;;AU) ACE is not present in the reference
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>
>Attribute: displayName will be modified/deleted it was last modified during a provision. Current usn: 3295
>DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com
>sd are not identical:
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>CN={46664FCB-185E-4F2F-89E3-9EE5DEDAF20D},CN=Policies,CN=System,DC=example,DC=com
>Attribute: versionNumber will be modified/deleted it was last modified during a provision. Current usn: 3382
>CN={E90D2E0A-CF02-4D28-8E30-82EE5FB19B59},CN=Policies,CN=System,DC=example,DC=com
>Attribute: versionNumber will be modified/deleted it was last modified during a provision. Current usn: 3385
>CN=RID Manager$,CN=System,DC=example,DC=com
>Attribute: rIDAvailablePool was not created/modified/deleted during a provision or upgradeprovision. Current usn: 8552. Doing nothing
>DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: BA (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(A;CIID;LC;;;RU) ACE is not present in the reference
>		(OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS) ACE is not present in the reference
>		(OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA) ACE is not present in the reference
>		(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;S-1-5-21-2848215498-2472035911-1947525656-498) ACE is not present in the reference
>		(OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD) ACE is not present in the reference
>		(OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ER) ACE is not present in the current
>		(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED) ACE is not present in the current
>	Part sacl is different between reference and current here is the detail:
>		(OU;CIIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD) ACE is not present in the reference
>		(OU;CIIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD) ACE is not present in the reference
>
>CN=Infrastructure,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>
>CN=LostAndFound,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>
>CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: SY (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPLCLORC;;;AU) ACE is not present in the reference
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>
>DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=@,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: BA (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;ED) ACE is not present in the reference
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=@,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_gc._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_gc._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_kerberos._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_kerberos._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_kerberos._udp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_kpasswd._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_kpasswd._udp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_msdcs,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=samba,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>CN=NTDS Quotas,DC=DomainDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>
>DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: BA (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(A;CIID;LC;;;RU) ACE is not present in the reference
>		(OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS) ACE is not present in the reference
>		(OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA) ACE is not present in the reference
>		(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;S-1-5-21-2848215498-2472035911-1947525656-498) ACE is not present in the reference
>		(OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD) ACE is not present in the reference
>		(OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ER) ACE is not present in the current
>		(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED) ACE is not present in the current
>	Part sacl is different between reference and current here is the detail:
>		(OU;CIIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD) ACE is not present in the reference
>		(OU;CIIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD) ACE is not present in the reference
>
>CN=Infrastructure,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>
>CN=LostAndFound,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>
>CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: SY (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPLCLORC;;;AU) ACE is not present in the reference
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>
>DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=1048d19d-df8d-4f37-ac9f-3727ce73b028,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=@,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_kerberos._tcp.Default-First-Site-Name._sites.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_kerberos._tcp.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.34a3e504-14b5-4a46-9cb0-453e59f3663a.domains,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.Default-First-Site-Name._sites.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.Default-First-Site-Name._sites.gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=_ldap._tcp.pdc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>DC=gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>CN=NTDS Quotas,DC=ForestDnsZones,DC=example,DC=com
>sd are not identical:
>	Owner mismatch: LA (in ref) DA(in current)
>
>CN=SAMBA,OU=Domain Controllers,DC=example,DC=com
>Attribute: servicePrincipalName was not created/modified/deleted during a provision or upgradeprovision. Current usn: 3442. Doing nothing
>CN=RID Set,CN=SAMBA,OU=Domain Controllers,DC=example,DC=com
>Attribute: rIDAllocationPool was not created/modified/deleted during a provision or upgradeprovision. Current usn: 8553. Doing nothing
>Attribute: rIDUsedPool was not created/modified/deleted during a provision or upgradeprovision. Current usn: 8561. Doing nothing
>There are 0 changed objects
>Update of samdb finished
>Update of secrets.ldb
>Adding/Changing attribute msDS-KeyVersionNumber to flatname=EXAMPLE,cn=Primary Domains
>Adding/Changing attribute priorSecret to flatname=EXAMPLE,cn=Primary Domains
>Adding/Changing attribute priorWhenChanged to flatname=EXAMPLE,cn=Primary Domains
>Update machine account
>Some defaultSecurityDescriptors and/orsecurityDescriptor have changed, recalculating SD 
>72 DNs have been marked as needed to be recalculated, recalculating 72 due to inheritance
>Checking recalculated SDs
>On object CN=e83daa04-ca41-468f-9c69-4d08cae983e3,CN=Partitions,CN=Configuration,DC=example,DC=com ACL is different 
>	Owner mismatch: EA (in ref) SY(in current)
>	Group mismatch: DU (in ref) SY(in current)
>
>On object CN=ecce2cac-d76f-408a-8bf8-067d32debecd,CN=Partitions,CN=Configuration,DC=example,DC=com ACL is different 
>	Owner mismatch: EA (in ref) SY(in current)
>	Group mismatch: DU (in ref) SY(in current)
>
>On object DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object CN=Infrastructure,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>
>On object DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_ldap._tcp.ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_ldap._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_gc._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_kpasswd._udp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=@,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object CN=Infrastructure,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>
>On object DC=_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=1048d19d-df8d-4f37-ac9f-3727ce73b028,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=samba,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_ldap._tcp.DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object CN=LostAndFound,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>
>On object DC=_ldap._tcp.Default-First-Site-Name._sites.gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: SY (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPLCLORC;;;AU) ACE is not present in the reference
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>
>On object CN=NTDS Quotas,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>
>On object DC=_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: SY (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPLCLORC;;;AU) ACE is not present in the reference
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>
>On object DC=_ldap._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_kerberos._udp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_ldap._tcp.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_ldap._tcp.Default-First-Site-Name._sites.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=@,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object CN=LostAndFound,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>
>On object DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: BA (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;ED) ACE is not present in the reference
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: BA (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(A;CIID;LC;;;RU) ACE is not present in the reference
>		(OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS) ACE is not present in the reference
>		(OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA) ACE is not present in the reference
>		(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;S-1-5-21-2848215498-2472035911-1947525656-498) ACE is not present in the reference
>		(OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD) ACE is not present in the reference
>		(OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ER) ACE is not present in the current
>		(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED) ACE is not present in the current
>
>On object CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: SY (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPLCLORC;;;AU) ACE is not present in the reference
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>		(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>
>On object DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: SY (in ref) DA(in current)
>	Group mismatch: BA (in ref) DU(in current)
>	Part dacl is different between reference and current here is the detail:
>		(OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(A;CIID;LC;;;RU) ACE is not present in the reference
>		(OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS) ACE is not present in the reference
>		(OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU) ACE is not present in the reference
>		(OA;CIID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA) ACE is not present in the reference
>		(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;S-1-5-21-2848215498-2472035911-1947525656-498) ACE is not present in the reference
>		(OA;CIID;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;DD) ACE is not present in the reference
>		(OA;CIID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA) ACE is not present in the reference
>		(OA;CIID;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU) ACE is not present in the reference
>		(OA;CIID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED) ACE is not present in the reference
>		(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ER) ACE is not present in the current
>		(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED) ACE is not present in the current
>
>On object DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_msdcs,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_kerberos._tcp.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_ldap._tcp.34a3e504-14b5-4a46-9cb0-453e59f3663a.domains,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_ldap._tcp.pdc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_kerberos._tcp.Default-First-Site-Name._sites.dc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=ForestDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_kerberos._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_gc._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_kpasswd._tcp,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=DomainDnsZones,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_kerberos._tcp.Default-First-Site-Name._sites,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=example,DC=com ACL is different 
>	Part dacl is different between reference and current here is the detail:
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=@,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=_ldap._tcp.gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object CN=NTDS Quotas,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>
>On object DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=gc,DC=_msdcs.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>On object DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com ACL is different 
>	Owner mismatch: LA (in ref) DA(in current)
>	Part dacl is different between reference and current here is the detail:
>		(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;LA) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;S-1-5-21-1669749161-1492036150-3562756080-1102) ACE is not present in the current
>		(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) ACE is not present in the current
>
>Upgrade finished!
>Reopenning samdb to trigger reindexing if needed after modification
>Reindexing finished
>

Actions: View

Attachments on bug 8669: 7218 | 7230