pull returned NT_STATUS_OK 3: struct drsuapi_DsGetNCChanges out: struct drsuapi_DsGetNCChanges level_out : * level_out : 0x00000006 (6) ctr : * ctr : union drsuapi_DsGetNCChangesCtr(case 6) ctr6: struct drsuapi_DsGetNCChangesCtr6 source_dsa_guid : 7694e653-8c56-4e6f-baf5-b37227d8a4cd source_dsa_invocation_id : c51bb38c-1051-4b72-a3de-96f7ed1d142b naming_context : * naming_context: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x0000005c (92) __ndr_size_sid : 0x00000018 (24) guid : b9750df0-070f-4a1e-93b1-81a4fcf41d77 sid : S-1-5-21-8659820-343394492-589173015 __ndr_size_dn : 0x00000011 (17) dn : 'dc=company3,dc=dd' old_highwatermark: struct drsuapi_DsReplicaHighWaterMark tmp_highest_usn : 0x0000000000000000 (0) reserved_usn : 0x0000000000000000 (0) highest_usn : 0x0000000000000000 (0) new_highwatermark: struct drsuapi_DsReplicaHighWaterMark tmp_highest_usn : 0x00000000000025e3 (9699) reserved_usn : 0x0000000000000000 (0) highest_usn : 0x00000000000025e3 (9699) uptodateness_vector : * uptodateness_vector: struct drsuapi_DsReplicaCursor2CtrEx version : 0x00000002 (2) reserved1 : 0x00000000 (0) count : 0x00000002 (2) reserved2 : 0x00000000 (0) cursors: ARRAY(2) cursors: struct drsuapi_DsReplicaCursor2 source_dsa_invocation_id : ae22e205-5f46-48ef-b165-27df4468843b highest_usn : 0x000000000000a480 (42112) last_sync_success : Thu Jan 1 12:00:00 AM 1970 UTC cursors: struct drsuapi_DsReplicaCursor2 source_dsa_invocation_id : c51bb38c-1051-4b72-a3de-96f7ed1d142b highest_usn : 0x00000000000025e6 (9702) last_sync_success : Thu Jan 1 12:00:00 AM 1970 UTC mapping_ctr: struct drsuapi_DsReplicaOIDMapping_Ctr num_mappings : 0x00000030 (48) mappings : * mappings: ARRAY(48) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000000 (0) oid: struct drsuapi_DsReplicaOID length : 0x00000002 (2) oid : length=2 binary_oid : 0x5504 (2.5.4) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000001 (1) oid: struct drsuapi_DsReplicaOID length : 0x00000002 (2) oid : length=2 binary_oid : 0x5506 (2.5.6) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000002 (2) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x2A864886F7140102 (1.2.840.113556.1.2) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000003 (3) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x2A864886F7140103 (1.2.840.113556.1.3) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000004 (4) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x6086480165020201 (2.16.840.1.101.2.2.1) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000005 (5) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x6086480165020203 (2.16.840.1.101.2.2.3) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000006 (6) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x6086480165020105 (2.16.840.1.101.2.1.5) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000007 (7) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x6086480165020104 (2.16.840.1.101.2.1.4) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000008 (8) oid: struct drsuapi_DsReplicaOID length : 0x00000002 (2) oid : length=2 binary_oid : 0x5505 (2.5.5) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000009 (9) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x2A864886F7140104 (1.2.840.113556.1.4) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000000a (10) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x2A864886F7140105 (1.2.840.113556.1.5) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000013 (19) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x0992268993F22C64 (0.9.2342.19200300.100) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000014 (20) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x6086480186F84203 (2.16.840.1.113730.3) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000015 (21) oid: struct drsuapi_DsReplicaOID length : 0x00000009 (9) oid : length=9 binary_oid : 0x0992268993F22C6401 (0.9.2342.19200300.100.1) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000016 (22) oid: struct drsuapi_DsReplicaOID length : 0x00000009 (9) oid : length=9 binary_oid : 0x6086480186F8420301 (2.16.840.1.113730.3.1) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000017 (23) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F7140105B658 (1.2.840.113556.1.5.7000) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000018 (24) oid: struct drsuapi_DsReplicaOID length : 0x00000002 (2) oid : length=2 binary_oid : 0x5515 (2.5.21) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000019 (25) oid: struct drsuapi_DsReplicaOID length : 0x00000002 (2) oid : length=2 binary_oid : 0x5512 (2.5.18) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000001a (26) oid: struct drsuapi_DsReplicaOID length : 0x00000002 (2) oid : length=2 binary_oid : 0x5514 (2.5.20) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000000b (11) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F71401048204 (1.2.840.113556.1.4.260) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000000c (12) oid: struct drsuapi_DsReplicaOID length : 0x00000009 (9) oid : length=9 binary_oid : 0x2A864886F714010538 (1.2.840.113556.1.5.56) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000000d (13) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F71401048206 (1.2.840.113556.1.4.262) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000000e (14) oid: struct drsuapi_DsReplicaOID length : 0x00000009 (9) oid : length=9 binary_oid : 0x2A864886F714010539 (1.2.840.113556.1.5.57) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000000f (15) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F71401048207 (1.2.840.113556.1.4.263) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000010 (16) oid: struct drsuapi_DsReplicaOID length : 0x00000009 (9) oid : length=9 binary_oid : 0x2A864886F71401053A (1.2.840.113556.1.5.58) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000011 (17) oid: struct drsuapi_DsReplicaOID length : 0x00000009 (9) oid : length=9 binary_oid : 0x2A864886F714010549 (1.2.840.113556.1.5.73) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000012 (18) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F71401048231 (1.2.840.113556.1.4.305) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000001b (27) oid: struct drsuapi_DsReplicaOID length : 0x00000009 (9) oid : length=9 binary_oid : 0x2B060104018B3A6577 (1.3.6.1.4.1.1466.101.119) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000001c (28) oid: struct drsuapi_DsReplicaOID length : 0x00000009 (9) oid : length=9 binary_oid : 0x6086480186F8420302 (2.16.840.1.113730.3.2) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000001d (29) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x2B06010401817A01 (1.3.6.1.4.1.250.1) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000001e (30) oid: struct drsuapi_DsReplicaOID length : 0x00000008 (8) oid : length=8 binary_oid : 0x2A864886F70D0109 (1.2.840.113549.1.9) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000001f (31) oid: struct drsuapi_DsReplicaOID length : 0x00000009 (9) oid : length=9 binary_oid : 0x0992268993F22C6404 (0.9.2342.19200300.100.4) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000020 (32) oid: struct drsuapi_DsReplicaOID length : 0x00000009 (9) oid : length=9 binary_oid : 0x2A864886F714010617 (1.2.840.113556.1.6.23) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000021 (33) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F71401061201 (1.2.840.113556.1.6.18.1) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000022 (34) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F71401061202 (1.2.840.113556.1.6.18.2) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000023 (35) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F71401060D03 (1.2.840.113556.1.6.13.3) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000024 (36) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F71401060D04 (1.2.840.113556.1.6.13.4) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000025 (37) oid: struct drsuapi_DsReplicaOID length : 0x00000006 (6) oid : length=6 binary_oid : 0x2B0601010101 (1.3.6.1.1.1.1) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000026 (38) oid: struct drsuapi_DsReplicaOID length : 0x00000006 (6) oid : length=6 binary_oid : 0x2B0601010102 (1.3.6.1.1.1.2) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00001334 (4916) oid: struct drsuapi_DsReplicaOID length : 0x0000000b (11) oid : length=11 binary_oid : 0x2A864886F7140104B65866 (1.2.840.113556.1.4.7000.102) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x0000134b (4939) oid: struct drsuapi_DsReplicaOID length : 0x0000000b (11) oid : length=11 binary_oid : 0x2A864886F7140105B6583E (1.2.840.113556.1.5.7000.62) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00001365 (4965) oid: struct drsuapi_DsReplicaOID length : 0x0000000c (12) oid : length=12 binary_oid : 0x2A864886F7140104B6586683 (1.2.840.113556.1.4.7000.102:0x83) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00001368 (4968) oid: struct drsuapi_DsReplicaOID length : 0x0000000c (12) oid : length=12 binary_oid : 0x2A864886F7140104B6586681 (1.2.840.113556.1.4.7000.102:0x81) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00001382 (4994) oid: struct drsuapi_DsReplicaOID length : 0x0000000c (12) oid : length=12 binary_oid : 0x2A864886F7140105B6583E81 (1.2.840.113556.1.5.7000.62:0x81) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00001412 (5138) oid: struct drsuapi_DsReplicaOID length : 0x0000000c (12) oid : length=12 binary_oid : 0x2A864886F7140105B6583E83 (1.2.840.113556.1.5.7000.62:0x83) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x000015a4 (5540) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F71401061401 (1.2.840.113556.1.6.20.1) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x000015aa (5546) oid: struct drsuapi_DsReplicaOID length : 0x0000000a (10) oid : length=10 binary_oid : 0x2A864886F71401061402 (1.2.840.113556.1.6.20.2) mappings: struct drsuapi_DsReplicaOIDMapping id_prefix : 0x00000000 (0) oid: struct drsuapi_DsReplicaOID length : 0x00000015 (21) oid : length=21 binary_oid : 0xFF0000086E05E222AE465FEF48B16527DF4468843B (6.15.0.0.8.110.5.12578.5958.95.14280.6373.39.12228.104.571) extended_ret : DRSUAPI_EXOP_ERR_NONE (0x0) object_count : 0x00000001 (1) __ndr_size : 0x00004271 (17009) first_object : * first_object: struct drsuapi_DsReplicaObjectListItemEx next_object : NULL object: struct drsuapi_DsReplicaObject identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x00000098 (152) __ndr_size_sid : 0x0000001c (28) guid : 88205b15-f5fd-4698-9939-d232ed78d537 sid : S-1-5-21-8659820-343394492-589173015-1115 __ndr_size_dn : 0x0000002f (47) dn : 'CN=DC02,OU=Domain Controllers,DC=company3,DC=dd' flags : 0x00000001 (1) 1: DRSUAPI_DS_REPLICA_OBJECT_FROM_MASTER 0: DRSUAPI_DS_REPLICA_OBJECT_DYNAMIC 0: DRSUAPI_DS_REPLICA_OBJECT_REMOTE_MODIFY attribute_ctr: struct drsuapi_DsReplicaAttributeCtr num_attributes : 0x00000002 (2) attributes : * attributes: ARRAY(2) attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_instanceType (0x20001) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000004 (4) blob : * blob : DATA_BLOB length=4 [0000] 04 00 00 00 .... attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_servicePrincipalName (0x90303) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x0000000f (15) values : * values: ARRAY(15) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000012 (18) blob : * blob : DATA_BLOB length=18 [0000] 48 00 4F 00 53 00 54 00 2F 00 44 00 43 00 30 00 H.O.S.T. /.D.C.0. [0010] 32 00 2. values: struct drsuapi_DsAttributeValue __ndr_size : 0x0000002a (42) blob : * blob : DATA_BLOB length=42 [0000] 48 00 4F 00 53 00 54 00 2F 00 64 00 63 00 30 00 H.O.S.T. /.d.c.0. [0010] 32 00 2E 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 2...c.o. m.p.a.n. [0020] 79 00 33 00 2E 00 64 00 64 00 y.3...d. d. values: struct drsuapi_DsAttributeValue __ndr_size : 0x0000003e (62) blob : * blob : DATA_BLOB length=62 [0000] 47 00 43 00 2F 00 64 00 63 00 30 00 32 00 2E 00 G.C./.d. c.0.2... [0010] 63 00 6F 00 6D 00 70 00 61 00 6E 00 79 00 33 00 c.o.m.p. a.n.y.3. [0020] 2E 00 64 00 64 00 2F 00 63 00 6F 00 6D 00 70 00 ..d.d./. c.o.m.p. [0030] 61 00 6E 00 79 00 33 00 2E 00 64 00 64 00 a.n.y.3. ..d.d. values: struct drsuapi_DsAttributeValue __ndr_size : 0x000000aa (170) blob : * blob : DATA_BLOB length=170 [0000] 45 00 33 00 35 00 31 00 34 00 32 00 33 00 35 00 E.3.5.1. 4.2.3.5. [0010] 2D 00 34 00 42 00 30 00 36 00 2D 00 31 00 31 00 -.4.B.0. 6.-.1.1. [0020] 44 00 31 00 2D 00 41 00 42 00 30 00 34 00 2D 00 D.1.-.A. B.0.4.-. [0030] 30 00 30 00 43 00 30 00 34 00 46 00 43 00 32 00 0.0.C.0. 4.F.C.2. [0040] 44 00 43 00 44 00 32 00 2F 00 37 00 36 00 39 00 D.C.D.2. /.7.6.9. [0050] 34 00 65 00 36 00 35 00 33 00 2D 00 38 00 63 00 4.e.6.5. 3.-.8.c. [0060] 35 00 36 00 2D 00 34 00 65 00 36 00 66 00 2D 00 5.6.-.4. e.6.f.-. [0070] 62 00 61 00 66 00 35 00 2D 00 62 00 33 00 37 00 b.a.f.5. -.b.3.7. [0080] 32 00 32 00 37 00 64 00 38 00 61 00 34 00 63 00 2.2.7.d. 8.a.4.c. [0090] 64 00 2F 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 d./.c.o. m.p.a.n. [00A0] 79 00 33 00 2E 00 64 00 64 00 y.3...d. d. values: struct drsuapi_DsAttributeValue __ndr_size : 0x0000003c (60) blob : * blob : DATA_BLOB length=60 [0000] 48 00 4F 00 53 00 54 00 2F 00 64 00 63 00 30 00 H.O.S.T. /.d.c.0. [0010] 32 00 2E 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 2...c.o. m.p.a.n. [0020] 79 00 33 00 2E 00 64 00 64 00 2F 00 43 00 4F 00 y.3...d. d./.C.O. [0030] 4D 00 50 00 41 00 4E 00 59 00 33 00 M.P.A.N. Y.3. values: struct drsuapi_DsAttributeValue __ndr_size : 0x0000003c (60) blob : * blob : DATA_BLOB length=60 [0000] 6C 00 64 00 61 00 70 00 2F 00 64 00 63 00 30 00 l.d.a.p. /.d.c.0. [0010] 32 00 2E 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 2...c.o. m.p.a.n. [0020] 79 00 33 00 2E 00 64 00 64 00 2F 00 43 00 4F 00 y.3...d. d./.C.O. [0030] 4D 00 50 00 41 00 4E 00 59 00 33 00 M.P.A.N. Y.3. values: struct drsuapi_DsAttributeValue __ndr_size : 0x0000002a (42) blob : * blob : DATA_BLOB length=42 [0000] 6C 00 64 00 61 00 70 00 2F 00 64 00 63 00 30 00 l.d.a.p. /.d.c.0. [0010] 32 00 2E 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 2...c.o. m.p.a.n. [0020] 79 00 33 00 2E 00 64 00 64 00 y.3...d. d. values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000042 (66) blob : * blob : DATA_BLOB length=66 [0000] 48 00 4F 00 53 00 54 00 2F 00 64 00 63 00 30 00 H.O.S.T. /.d.c.0. [0010] 32 00 2E 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 2...c.o. m.p.a.n. [0020] 79 00 33 00 2E 00 64 00 64 00 2F 00 63 00 6F 00 y.3...d. d./.c.o. [0030] 6D 00 70 00 61 00 6E 00 79 00 33 00 2E 00 64 00 m.p.a.n. y.3...d. [0040] 64 00 d. values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000042 (66) blob : * blob : DATA_BLOB length=66 [0000] 6C 00 64 00 61 00 70 00 2F 00 64 00 63 00 30 00 l.d.a.p. /.d.c.0. [0010] 32 00 2E 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 2...c.o. m.p.a.n. [0020] 79 00 33 00 2E 00 64 00 64 00 2F 00 63 00 6F 00 y.3...d. d./.c.o. [0030] 6D 00 70 00 61 00 6E 00 79 00 33 00 2E 00 64 00 m.p.a.n. y.3...d. [0040] 64 00 d. values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000078 (120) blob : * blob : DATA_BLOB length=120 [0000] 6C 00 64 00 61 00 70 00 2F 00 37 00 36 00 39 00 l.d.a.p. /.7.6.9. [0010] 34 00 65 00 36 00 35 00 33 00 2D 00 38 00 63 00 4.e.6.5. 3.-.8.c. [0020] 35 00 36 00 2D 00 34 00 65 00 36 00 66 00 2D 00 5.6.-.4. e.6.f.-. [0030] 62 00 61 00 66 00 35 00 2D 00 62 00 33 00 37 00 b.a.f.5. -.b.3.7. [0040] 32 00 32 00 37 00 64 00 38 00 61 00 34 00 63 00 2.2.7.d. 8.a.4.c. [0050] 64 00 2E 00 5F 00 6D 00 73 00 64 00 63 00 73 00 d..._.m. s.d.c.s. [0060] 2E 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 79 00 ..c.o.m. p.a.n.y. [0070] 33 00 2E 00 64 00 64 00 3...d.d. values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000012 (18) blob : * blob : DATA_BLOB length=18 [0000] 6C 00 64 00 61 00 70 00 2F 00 44 00 43 00 30 00 l.d.a.p. /.D.C.0. [0010] 32 00 2. values: struct drsuapi_DsAttributeValue __ndr_size : 0x0000002c (44) blob : * blob : DATA_BLOB length=44 [0000] 52 00 65 00 73 00 74 00 72 00 69 00 63 00 74 00 R.e.s.t. r.i.c.t. [0010] 65 00 64 00 4B 00 72 00 62 00 48 00 6F 00 73 00 e.d.K.r. b.H.o.s. [0020] 74 00 2F 00 44 00 43 00 30 00 32 00 t./.D.C. 0.2. values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000044 (68) blob : * blob : DATA_BLOB length=68 [0000] 52 00 65 00 73 00 74 00 72 00 69 00 63 00 74 00 R.e.s.t. r.i.c.t. [0010] 65 00 64 00 4B 00 72 00 62 00 48 00 6F 00 73 00 e.d.K.r. b.H.o.s. [0020] 74 00 2F 00 64 00 63 00 30 00 32 00 2E 00 63 00 t./.d.c. 0.2...c. [0030] 6F 00 6D 00 70 00 61 00 6E 00 79 00 33 00 2E 00 o.m.p.a. n.y.3... [0040] 64 00 64 00 d.d. values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000060 (96) blob : * blob : DATA_BLOB length=96 [0000] 6C 00 64 00 61 00 70 00 2F 00 64 00 63 00 30 00 l.d.a.p. /.d.c.0. [0010] 32 00 2E 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 2...c.o. m.p.a.n. [0020] 79 00 33 00 2E 00 64 00 64 00 2F 00 44 00 6F 00 y.3...d. d./.D.o. [0030] 6D 00 61 00 69 00 6E 00 44 00 6E 00 73 00 5A 00 m.a.i.n. D.n.s.Z. [0040] 6F 00 6E 00 65 00 73 00 2E 00 63 00 6F 00 6D 00 o.n.e.s. ..c.o.m. [0050] 70 00 61 00 6E 00 79 00 33 00 2E 00 64 00 64 00 p.a.n.y. 3...d.d. values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000060 (96) blob : * blob : DATA_BLOB length=96 [0000] 6C 00 64 00 61 00 70 00 2F 00 64 00 63 00 30 00 l.d.a.p. /.d.c.0. [0010] 32 00 2E 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 2...c.o. m.p.a.n. [0020] 79 00 33 00 2E 00 64 00 64 00 2F 00 46 00 6F 00 y.3...d. d./.F.o. [0030] 72 00 65 00 73 00 74 00 44 00 6E 00 73 00 5A 00 r.e.s.t. D.n.s.Z. [0040] 6F 00 6E 00 65 00 73 00 2E 00 63 00 6F 00 6D 00 o.n.e.s. ..c.o.m. [0050] 70 00 61 00 6E 00 79 00 33 00 2E 00 64 00 64 00 p.a.n.y. 3...d.d. is_nc_prefix : 0x00000000 (0) parent_object_guid : * parent_object_guid : 26040a5a-19be-46b1-9d12-118bc5b3ed34 meta_data_ctr : * meta_data_ctr: struct drsuapi_DsReplicaMetaDataCtr count : 0x00000002 (2) meta_data: ARRAY(2) meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Tue Feb 9 01:17:08 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x000000000000a023 (40995) meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000002 (2) originating_change_time : Tue Feb 9 01:17:54 PM 2016 UTC originating_invocation_id: c51bb38c-1051-4b72-a3de-96f7ed1d142b originating_usn : 0x00000000000025b7 (9655) more_data : 0x00000000 (0) nc_object_count : 0x000000e5 (229) nc_linked_attributes_count: 0x00000000 (0) linked_attributes_count : 0x00000014 (20) linked_attributes : * linked_attributes: ARRAY(20) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x00000128 (296) __ndr_size_sid : 0x00000000 (0) guid : 2a430a08-90d0-4e3a-84c9-1b5e8f5497f4 sid : S-0-0 __ndr_size_dn : 0x00000077 (119) dn : 'CN=Schedule\+ Free Busy Information - First Administrative Group,CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x000000000000863a (34362) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000be (190) __ndr_size_sid : 0x00000010 (16) guid : 39c6271e-ff34-495e-a1f6-ff2769864425 sid : S-1-5-32-554 __ndr_size_dn : 0x00000042 (66) dn : 'CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=company3,DC=dd' attid : DRSUAPI_ATTID_member (0x1F) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000000ae (174) blob : * blob : DATA_BLOB length=174 [0000] AE 00 00 00 0C 00 00 00 AC 6F 16 5E 9D B6 10 45 ........ .o.^...E [0010] 84 E4 69 07 80 32 EA 60 01 01 00 00 00 00 00 05 ..i..2.` ........ [0020] 0B 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 3A 00 00 00 43 00 4E 00 3D 00 53 00 ....:... C.N.=.S. [0040] 2D 00 31 00 2D 00 35 00 2D 00 31 00 31 00 2C 00 -.1.-.5. -.1.1.,. [0050] 43 00 4E 00 3D 00 46 00 6F 00 72 00 65 00 69 00 C.N.=.F. o.r.e.i. [0060] 67 00 6E 00 53 00 65 00 63 00 75 00 72 00 69 00 g.n.S.e. c.u.r.i. [0070] 74 00 79 00 50 00 72 00 69 00 6E 00 63 00 69 00 t.y.P.r. i.n.c.i. [0080] 70 00 61 00 6C 00 73 00 2C 00 44 00 43 00 3D 00 p.a.l.s. ,.D.C.=. [0090] 63 00 6F 00 6D 00 70 00 61 00 6E 00 79 00 33 00 c.o.m.p. a.n.y.3. [00A0] 2C 00 44 00 43 00 3D 00 64 00 64 00 00 00 ,.D.C.=. d.d... flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : NTTIME(0) meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000000 (0) originating_change_time : NTTIME(0) originating_invocation_id: c51bb38c-1051-4b72-a3de-96f7ed1d142b originating_usn : 0x0000000000000001 (1) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000be (190) __ndr_size_sid : 0x00000010 (16) guid : 39c6271e-ff34-495e-a1f6-ff2769864425 sid : S-1-5-32-554 __ndr_size_dn : 0x00000042 (66) dn : 'CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=company3,DC=dd' attid : DRSUAPI_ATTID_member (0x1F) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000000a4 (164) blob : * blob : DATA_BLOB length=164 [0000] A4 00 00 00 1C 00 00 00 6F DD AC DC EE 2E 6C 4E ........ o.....lN [0010] B1 42 21 48 29 87 8A 02 01 05 00 00 00 00 00 05 .B!H)... ........ [0020] 15 00 00 00 6C 23 84 00 BC C8 77 14 17 11 1E 23 ....l#.. ..w....# [0030] 58 04 00 00 35 00 00 00 43 00 4E 00 3D 00 45 00 X...5... C.N.=.E. [0040] 78 00 63 00 68 00 61 00 6E 00 67 00 65 00 20 00 x.c.h.a. n.g.e. . [0050] 44 00 6F 00 6D 00 61 00 69 00 6E 00 20 00 53 00 D.o.m.a. i.n. .S. [0060] 65 00 72 00 76 00 65 00 72 00 73 00 2C 00 43 00 e.r.v.e. r.s.,.C. [0070] 4E 00 3D 00 55 00 73 00 65 00 72 00 73 00 2C 00 N.=.U.s. e.r.s.,. [0080] 44 00 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 D.C.=.c. o.m.p.a. [0090] 6E 00 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 n.y.3.,. D.C.=.d. [00A0] 64 00 00 00 d... flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:13:53 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:13:53 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x0000000000006d65 (28005) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000c4 (196) __ndr_size_sid : 0x00000000 (0) guid : 40d8295c-8864-4252-8ff2-70d6d21e4c05 sid : S-0-0 __ndr_size_dn : 0x00000045 (69) dn : 'CN=schema-root,CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x0000000000008646 (34374) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000be (190) __ndr_size_sid : 0x00000000 (0) guid : 45117710-0607-485d-b3a4-2785161b822e sid : S-0-0 __ndr_size_dn : 0x00000042 (66) dn : 'CN=internal,CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x0000000000008642 (34370) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x00000080 (128) __ndr_size_sid : 0x0000001c (28) guid : 4918fb2d-e8d1-4f98-92d8-8489799d52fa sid : S-1-5-21-8659820-343394492-589173015-1110 __ndr_size_dn : 0x00000023 (35) dn : 'CN=user3,CN=Users,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x0000020e (526) blob : * blob : DATA_BLOB length=526 [0000] 0E 02 00 00 00 00 00 00 F9 42 2D 84 F0 83 BA 4C ........ .B-....L [0010] B7 D4 49 2F 6A 63 28 E1 00 00 00 00 00 00 00 00 ..I/jc(. ........ skipping zero buffer bytes [0030] 00 00 00 00 EA 00 00 00 43 00 4E 00 3D 00 4D 00 ........ C.N.=.M. [0040] 61 00 69 00 6C 00 62 00 6F 00 78 00 20 00 53 00 a.i.l.b. o.x. .S. [0050] 74 00 6F 00 72 00 65 00 20 00 28 00 45 00 58 00 t.o.r.e. .(.E.X. [0060] 30 00 31 00 29 00 2C 00 43 00 4E 00 3D 00 46 00 0.1.).,. C.N.=.F. [0070] 69 00 72 00 73 00 74 00 20 00 53 00 74 00 6F 00 i.r.s.t. .S.t.o. [0080] 72 00 61 00 67 00 65 00 20 00 47 00 72 00 6F 00 r.a.g.e. .G.r.o. [0090] 75 00 70 00 2C 00 43 00 4E 00 3D 00 49 00 6E 00 u.p.,.C. N.=.I.n. [00A0] 66 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 f.o.r.m. a.t.i.o. [00B0] 6E 00 53 00 74 00 6F 00 72 00 65 00 2C 00 43 00 n.S.t.o. r.e.,.C. [00C0] 4E 00 3D 00 45 00 58 00 30 00 31 00 2C 00 43 00 N.=.E.X. 0.1.,.C. [00D0] 4E 00 3D 00 53 00 65 00 72 00 76 00 65 00 72 00 N.=.S.e. r.v.e.r. [00E0] 73 00 2C 00 43 00 4E 00 3D 00 46 00 69 00 72 00 s.,.C.N. =.F.i.r. [00F0] 73 00 74 00 20 00 41 00 64 00 6D 00 69 00 6E 00 s.t. .A. d.m.i.n. [0100] 69 00 73 00 74 00 72 00 61 00 74 00 69 00 76 00 i.s.t.r. a.t.i.v. [0110] 65 00 20 00 47 00 72 00 6F 00 75 00 70 00 2C 00 e. .G.r. o.u.p.,. [0120] 43 00 4E 00 3D 00 41 00 64 00 6D 00 69 00 6E 00 C.N.=.A. d.m.i.n. [0130] 69 00 73 00 74 00 72 00 61 00 74 00 69 00 76 00 i.s.t.r. a.t.i.v. [0140] 65 00 20 00 47 00 72 00 6F 00 75 00 70 00 73 00 e. .G.r. o.u.p.s. [0150] 2C 00 43 00 4E 00 3D 00 43 00 6F 00 6D 00 70 00 ,.C.N.=. C.o.m.p. [0160] 61 00 6E 00 79 00 33 00 20 00 4F 00 72 00 67 00 a.n.y.3. .O.r.g. [0170] 61 00 6E 00 69 00 73 00 61 00 74 00 69 00 6F 00 a.n.i.s. a.t.i.o. [0180] 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 69 00 63 00 n.,.C.N. =.M.i.c. [0190] 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 45 00 r.o.s.o. f.t. .E. [01A0] 78 00 63 00 68 00 61 00 6E 00 67 00 65 00 2C 00 x.c.h.a. n.g.e.,. [01B0] 43 00 4E 00 3D 00 53 00 65 00 72 00 76 00 69 00 C.N.=.S. e.r.v.i. [01C0] 63 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 c.e.s.,. C.N.=.C. [01D0] 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 61 00 o.n.f.i. g.u.r.a. [01E0] 74 00 69 00 6F 00 6E 00 2C 00 44 00 43 00 3D 00 t.i.o.n. ,.D.C.=. [01F0] 63 00 6F 00 6D 00 70 00 61 00 6E 00 79 00 33 00 c.o.m.p. a.n.y.3. [0200] 2C 00 44 00 43 00 3D 00 64 00 64 00 00 00 ,.D.C.=. d.d... flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:28:43 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:28:43 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x0000000000008679 (34425) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000c6 (198) __ndr_size_sid : 0x00000000 (0) guid : 4ff42b66-5c49-4f80-8cc2-90e37f013914 sid : S-0-0 __ndr_size_dn : 0x00000046 (70) dn : 'CN=globalevents,CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x0000000000008644 (34372) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x00000114 (276) __ndr_size_sid : 0x0000001c (28) guid : 58422643-3356-481d-905b-169cb7ddf663 sid : S-1-5-21-8659820-343394492-589173015-1114 __ndr_size_dn : 0x0000006d (109) dn : 'CN=SystemMailbox{842D42F9-83F0-4CBA-B7D4-492F6A6328E1},CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x0000020e (526) blob : * blob : DATA_BLOB length=526 [0000] 0E 02 00 00 00 00 00 00 F9 42 2D 84 F0 83 BA 4C ........ .B-....L [0010] B7 D4 49 2F 6A 63 28 E1 00 00 00 00 00 00 00 00 ..I/jc(. ........ skipping zero buffer bytes [0030] 00 00 00 00 EA 00 00 00 43 00 4E 00 3D 00 4D 00 ........ C.N.=.M. [0040] 61 00 69 00 6C 00 62 00 6F 00 78 00 20 00 53 00 a.i.l.b. o.x. .S. [0050] 74 00 6F 00 72 00 65 00 20 00 28 00 45 00 58 00 t.o.r.e. .(.E.X. [0060] 30 00 31 00 29 00 2C 00 43 00 4E 00 3D 00 46 00 0.1.).,. C.N.=.F. [0070] 69 00 72 00 73 00 74 00 20 00 53 00 74 00 6F 00 i.r.s.t. .S.t.o. [0080] 72 00 61 00 67 00 65 00 20 00 47 00 72 00 6F 00 r.a.g.e. .G.r.o. [0090] 75 00 70 00 2C 00 43 00 4E 00 3D 00 49 00 6E 00 u.p.,.C. N.=.I.n. [00A0] 66 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 f.o.r.m. a.t.i.o. [00B0] 6E 00 53 00 74 00 6F 00 72 00 65 00 2C 00 43 00 n.S.t.o. r.e.,.C. [00C0] 4E 00 3D 00 45 00 58 00 30 00 31 00 2C 00 43 00 N.=.E.X. 0.1.,.C. [00D0] 4E 00 3D 00 53 00 65 00 72 00 76 00 65 00 72 00 N.=.S.e. r.v.e.r. [00E0] 73 00 2C 00 43 00 4E 00 3D 00 46 00 69 00 72 00 s.,.C.N. =.F.i.r. [00F0] 73 00 74 00 20 00 41 00 64 00 6D 00 69 00 6E 00 s.t. .A. d.m.i.n. [0100] 69 00 73 00 74 00 72 00 61 00 74 00 69 00 76 00 i.s.t.r. a.t.i.v. [0110] 65 00 20 00 47 00 72 00 6F 00 75 00 70 00 2C 00 e. .G.r. o.u.p.,. [0120] 43 00 4E 00 3D 00 41 00 64 00 6D 00 69 00 6E 00 C.N.=.A. d.m.i.n. [0130] 69 00 73 00 74 00 72 00 61 00 74 00 69 00 76 00 i.s.t.r. a.t.i.v. [0140] 65 00 20 00 47 00 72 00 6F 00 75 00 70 00 73 00 e. .G.r. o.u.p.s. [0150] 2C 00 43 00 4E 00 3D 00 43 00 6F 00 6D 00 70 00 ,.C.N.=. C.o.m.p. [0160] 61 00 6E 00 79 00 33 00 20 00 4F 00 72 00 67 00 a.n.y.3. .O.r.g. [0170] 61 00 6E 00 69 00 73 00 61 00 74 00 69 00 6F 00 a.n.i.s. a.t.i.o. [0180] 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 69 00 63 00 n.,.C.N. =.M.i.c. [0190] 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 45 00 r.o.s.o. f.t. .E. [01A0] 78 00 63 00 68 00 61 00 6E 00 67 00 65 00 2C 00 x.c.h.a. n.g.e.,. [01B0] 43 00 4E 00 3D 00 53 00 65 00 72 00 76 00 69 00 C.N.=.S. e.r.v.i. [01C0] 63 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 c.e.s.,. C.N.=.C. [01D0] 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 61 00 o.n.f.i. g.u.r.a. [01E0] 74 00 69 00 6F 00 6E 00 2C 00 44 00 43 00 3D 00 t.i.o.n. ,.D.C.=. [01F0] 63 00 6F 00 6D 00 70 00 61 00 6E 00 79 00 33 00 c.o.m.p. a.n.y.3. [0200] 2C 00 44 00 43 00 3D 00 64 00 64 00 00 00 ,.D.C.=. d.d... flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:20:59 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:20:59 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x000000000000862f (34351) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x00000080 (128) __ndr_size_sid : 0x0000001c (28) guid : 63dff90b-1461-42a2-a35c-e47a3d0ea4dd sid : S-1-5-21-8659820-343394492-589173015-1109 __ndr_size_dn : 0x00000023 (35) dn : 'CN=user2,CN=Users,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x0000020e (526) blob : * blob : DATA_BLOB length=526 [0000] 0E 02 00 00 00 00 00 00 F9 42 2D 84 F0 83 BA 4C ........ .B-....L [0010] B7 D4 49 2F 6A 63 28 E1 00 00 00 00 00 00 00 00 ..I/jc(. ........ skipping zero buffer bytes [0030] 00 00 00 00 EA 00 00 00 43 00 4E 00 3D 00 4D 00 ........ C.N.=.M. [0040] 61 00 69 00 6C 00 62 00 6F 00 78 00 20 00 53 00 a.i.l.b. o.x. .S. [0050] 74 00 6F 00 72 00 65 00 20 00 28 00 45 00 58 00 t.o.r.e. .(.E.X. [0060] 30 00 31 00 29 00 2C 00 43 00 4E 00 3D 00 46 00 0.1.).,. C.N.=.F. [0070] 69 00 72 00 73 00 74 00 20 00 53 00 74 00 6F 00 i.r.s.t. .S.t.o. [0080] 72 00 61 00 67 00 65 00 20 00 47 00 72 00 6F 00 r.a.g.e. .G.r.o. [0090] 75 00 70 00 2C 00 43 00 4E 00 3D 00 49 00 6E 00 u.p.,.C. N.=.I.n. [00A0] 66 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 f.o.r.m. a.t.i.o. [00B0] 6E 00 53 00 74 00 6F 00 72 00 65 00 2C 00 43 00 n.S.t.o. r.e.,.C. [00C0] 4E 00 3D 00 45 00 58 00 30 00 31 00 2C 00 43 00 N.=.E.X. 0.1.,.C. [00D0] 4E 00 3D 00 53 00 65 00 72 00 76 00 65 00 72 00 N.=.S.e. r.v.e.r. [00E0] 73 00 2C 00 43 00 4E 00 3D 00 46 00 69 00 72 00 s.,.C.N. =.F.i.r. [00F0] 73 00 74 00 20 00 41 00 64 00 6D 00 69 00 6E 00 s.t. .A. d.m.i.n. [0100] 69 00 73 00 74 00 72 00 61 00 74 00 69 00 76 00 i.s.t.r. a.t.i.v. [0110] 65 00 20 00 47 00 72 00 6F 00 75 00 70 00 2C 00 e. .G.r. o.u.p.,. [0120] 43 00 4E 00 3D 00 41 00 64 00 6D 00 69 00 6E 00 C.N.=.A. d.m.i.n. [0130] 69 00 73 00 74 00 72 00 61 00 74 00 69 00 76 00 i.s.t.r. a.t.i.v. [0140] 65 00 20 00 47 00 72 00 6F 00 75 00 70 00 73 00 e. .G.r. o.u.p.s. [0150] 2C 00 43 00 4E 00 3D 00 43 00 6F 00 6D 00 70 00 ,.C.N.=. C.o.m.p. [0160] 61 00 6E 00 79 00 33 00 20 00 4F 00 72 00 67 00 a.n.y.3. .O.r.g. [0170] 61 00 6E 00 69 00 73 00 61 00 74 00 69 00 6F 00 a.n.i.s. a.t.i.o. [0180] 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 69 00 63 00 n.,.C.N. =.M.i.c. [0190] 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 45 00 r.o.s.o. f.t. .E. [01A0] 78 00 63 00 68 00 61 00 6E 00 67 00 65 00 2C 00 x.c.h.a. n.g.e.,. [01B0] 43 00 4E 00 3D 00 53 00 65 00 72 00 76 00 69 00 C.N.=.S. e.r.v.i. [01C0] 63 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 c.e.s.,. C.N.=.C. [01D0] 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 61 00 o.n.f.i. g.u.r.a. [01E0] 74 00 69 00 6F 00 6E 00 2C 00 44 00 43 00 3D 00 t.i.o.n. ,.D.C.=. [01F0] 63 00 6F 00 6D 00 70 00 61 00 6E 00 79 00 33 00 c.o.m.p. a.n.y.3. [0200] 2C 00 44 00 43 00 3D 00 64 00 64 00 00 00 ,.D.C.=. d.d... flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:28:36 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:28:36 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x0000000000008677 (34423) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x00000110 (272) __ndr_size_sid : 0x00000000 (0) guid : 8243c332-94bb-447a-9758-aa5a6ee9ea57 sid : S-0-0 __ndr_size_dn : 0x0000006b (107) dn : 'CN=Offline Address Book - First Administrative Group,CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x000000000000863c (34364) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000bc (188) __ndr_size_sid : 0x00000000 (0) guid : 9539fbe1-4081-4e84-bdc5-bd7951388d7d sid : S-0-0 __ndr_size_dn : 0x00000041 (65) dn : 'CN=Default,CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x000000000000864c (34380) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x00000090 (144) __ndr_size_sid : 0x0000001c (28) guid : 9acd912f-b82c-4460-a940-0d98106ab3dc sid : S-1-5-21-8659820-343394492-589173015-500 __ndr_size_dn : 0x0000002b (43) dn : 'CN=Administrator,CN=Users,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x0000020e (526) blob : * blob : DATA_BLOB length=526 [0000] 0E 02 00 00 00 00 00 00 F9 42 2D 84 F0 83 BA 4C ........ .B-....L [0010] B7 D4 49 2F 6A 63 28 E1 00 00 00 00 00 00 00 00 ..I/jc(. ........ skipping zero buffer bytes [0030] 00 00 00 00 EA 00 00 00 43 00 4E 00 3D 00 4D 00 ........ C.N.=.M. [0040] 61 00 69 00 6C 00 62 00 6F 00 78 00 20 00 53 00 a.i.l.b. o.x. .S. [0050] 74 00 6F 00 72 00 65 00 20 00 28 00 45 00 58 00 t.o.r.e. .(.E.X. [0060] 30 00 31 00 29 00 2C 00 43 00 4E 00 3D 00 46 00 0.1.).,. C.N.=.F. [0070] 69 00 72 00 73 00 74 00 20 00 53 00 74 00 6F 00 i.r.s.t. .S.t.o. [0080] 72 00 61 00 67 00 65 00 20 00 47 00 72 00 6F 00 r.a.g.e. .G.r.o. [0090] 75 00 70 00 2C 00 43 00 4E 00 3D 00 49 00 6E 00 u.p.,.C. N.=.I.n. [00A0] 66 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 f.o.r.m. a.t.i.o. [00B0] 6E 00 53 00 74 00 6F 00 72 00 65 00 2C 00 43 00 n.S.t.o. r.e.,.C. [00C0] 4E 00 3D 00 45 00 58 00 30 00 31 00 2C 00 43 00 N.=.E.X. 0.1.,.C. [00D0] 4E 00 3D 00 53 00 65 00 72 00 76 00 65 00 72 00 N.=.S.e. r.v.e.r. [00E0] 73 00 2C 00 43 00 4E 00 3D 00 46 00 69 00 72 00 s.,.C.N. =.F.i.r. [00F0] 73 00 74 00 20 00 41 00 64 00 6D 00 69 00 6E 00 s.t. .A. d.m.i.n. [0100] 69 00 73 00 74 00 72 00 61 00 74 00 69 00 76 00 i.s.t.r. a.t.i.v. [0110] 65 00 20 00 47 00 72 00 6F 00 75 00 70 00 2C 00 e. .G.r. o.u.p.,. [0120] 43 00 4E 00 3D 00 41 00 64 00 6D 00 69 00 6E 00 C.N.=.A. d.m.i.n. [0130] 69 00 73 00 74 00 72 00 61 00 74 00 69 00 76 00 i.s.t.r. a.t.i.v. [0140] 65 00 20 00 47 00 72 00 6F 00 75 00 70 00 73 00 e. .G.r. o.u.p.s. [0150] 2C 00 43 00 4E 00 3D 00 43 00 6F 00 6D 00 70 00 ,.C.N.=. C.o.m.p. [0160] 61 00 6E 00 79 00 33 00 20 00 4F 00 72 00 67 00 a.n.y.3. .O.r.g. [0170] 61 00 6E 00 69 00 73 00 61 00 74 00 69 00 6F 00 a.n.i.s. a.t.i.o. [0180] 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 69 00 63 00 n.,.C.N. =.M.i.c. [0190] 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 45 00 r.o.s.o. f.t. .E. [01A0] 78 00 63 00 68 00 61 00 6E 00 67 00 65 00 2C 00 x.c.h.a. n.g.e.,. [01B0] 43 00 4E 00 3D 00 53 00 65 00 72 00 76 00 69 00 C.N.=.S. e.r.v.i. [01C0] 63 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 c.e.s.,. C.N.=.C. [01D0] 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 61 00 o.n.f.i. g.u.r.a. [01E0] 74 00 69 00 6F 00 6E 00 2C 00 44 00 43 00 3D 00 t.i.o.n. ,.D.C.=. [01F0] 63 00 6F 00 6D 00 70 00 61 00 6E 00 79 00 33 00 c.o.m.p. a.n.y.3. [0200] 2C 00 44 00 43 00 3D 00 64 00 64 00 00 00 ,.D.C.=. d.d... flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:18:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:18:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x00000000000085f5 (34293) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000c0 (192) __ndr_size_sid : 0x00000000 (0) guid : 9ecaa372-366b-4442-97ab-1f9902ef25bb sid : S-0-0 __ndr_size_dn : 0x00000043 (67) dn : 'CN=microsoft,CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x0000000000008648 (34376) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x0000013a (314) __ndr_size_sid : 0x00000000 (0) guid : aa9f9204-53fd-4201-95db-9f37f7abf0ee sid : S-0-0 __ndr_size_dn : 0x00000080 (128) dn : 'CN=Offline Address Book - /o\3DCompany3 Organisation/cn\3Daddrlists/cn\3D,CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x000000000000863e (34366) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000c2 (194) __ndr_size_sid : 0x00000000 (0) guid : b57a85f7-f1aa-4b33-87b8-d1d604706585 sid : S-0-0 __ndr_size_dn : 0x00000044 (68) dn : 'CN=exchangeV1,CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x000000000000864a (34378) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x00000110 (272) __ndr_size_sid : 0x00000000 (0) guid : b620bd0f-9d42-4e80-83cb-f16ef85d62ad sid : S-0-0 __ndr_size_dn : 0x0000006b (107) dn : 'CN=StoreEvents{81A14162-C44D-41D3-AB4C-208AF5661E07},CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x0000000000008640 (34368) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x00000114 (276) __ndr_size_sid : 0x00000000 (0) guid : d7d87e7f-e909-4d01-bb51-9999c8df743b sid : S-0-0 __ndr_size_dn : 0x0000006d (109) dn : 'CN=OWAScratchPad{81A14162-C44D-41D3-AB4C-208AF5661E07},CN=Microsoft Exchange System Objects,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000001b2 (434) blob : * blob : DATA_BLOB length=434 [0000] B2 01 00 00 00 00 00 00 3E 38 74 B0 9B 12 E0 4D ........ >8t....M [0010] 80 17 6A 32 AC 04 22 A9 00 00 00 00 00 00 00 00 ..j2..". ........ skipping zero buffer bytes [0030] 00 00 00 00 BC 00 00 00 43 00 4E 00 3D 00 50 00 ........ C.N.=.P. [0040] 75 00 62 00 6C 00 69 00 63 00 20 00 46 00 6F 00 u.b.l.i. c. .F.o. [0050] 6C 00 64 00 65 00 72 00 73 00 2C 00 43 00 4E 00 l.d.e.r. s.,.C.N. [0060] 3D 00 46 00 6F 00 6C 00 64 00 65 00 72 00 20 00 =.F.o.l. d.e.r. . [0070] 48 00 69 00 65 00 72 00 61 00 72 00 63 00 68 00 H.i.e.r. a.r.c.h. [0080] 69 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 46 00 i.e.s.,. C.N.=.F. [0090] 69 00 72 00 73 00 74 00 20 00 41 00 64 00 6D 00 i.r.s.t. .A.d.m. [00A0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00B0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00C0] 70 00 2C 00 43 00 4E 00 3D 00 41 00 64 00 6D 00 p.,.C.N. =.A.d.m. [00D0] 69 00 6E 00 69 00 73 00 74 00 72 00 61 00 74 00 i.n.i.s. t.r.a.t. [00E0] 69 00 76 00 65 00 20 00 47 00 72 00 6F 00 75 00 i.v.e. . G.r.o.u. [00F0] 70 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 p.s.,.C. N.=.C.o. [0100] 6D 00 70 00 61 00 6E 00 79 00 33 00 20 00 4F 00 m.p.a.n. y.3. .O. [0110] 72 00 67 00 61 00 6E 00 69 00 73 00 61 00 74 00 r.g.a.n. i.s.a.t. [0120] 69 00 6F 00 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 i.o.n.,. C.N.=.M. [0130] 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 i.c.r.o. s.o.f.t. [0140] 20 00 45 00 78 00 63 00 68 00 61 00 6E 00 67 00 .E.x.c. h.a.n.g. [0150] 65 00 2C 00 43 00 4E 00 3D 00 53 00 65 00 72 00 e.,.C.N. =.S.e.r. [0160] 76 00 69 00 63 00 65 00 73 00 2C 00 43 00 4E 00 v.i.c.e. s.,.C.N. [0170] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0180] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0190] 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 6E 00 C.=.c.o. m.p.a.n. [01A0] 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 64 00 y.3.,.D. C.=.d.d. [01B0] 00 00 .. flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:21:03 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:21:03 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x000000000000864e (34382) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000ac (172) __ndr_size_sid : 0x0000001c (28) guid : db6881a9-5d7b-43d3-8776-f3fd478381f2 sid : S-1-5-21-8659820-343394492-589173015-1113 __ndr_size_dn : 0x00000039 (57) dn : 'CN=Exchange Enterprise Servers,CN=Users,DC=company3,DC=dd' attid : DRSUAPI_ATTID_member (0x1F) value: struct drsuapi_DsAttributeValue __ndr_size : 0x000000a4 (164) blob : * blob : DATA_BLOB length=164 [0000] A4 00 00 00 1C 00 00 00 6F DD AC DC EE 2E 6C 4E ........ o.....lN [0010] B1 42 21 48 29 87 8A 02 01 05 00 00 00 00 00 05 .B!H)... ........ [0020] 15 00 00 00 6C 23 84 00 BC C8 77 14 17 11 1E 23 ....l#.. ..w....# [0030] 58 04 00 00 35 00 00 00 43 00 4E 00 3D 00 45 00 X...5... C.N.=.E. [0040] 78 00 63 00 68 00 61 00 6E 00 67 00 65 00 20 00 x.c.h.a. n.g.e. . [0050] 44 00 6F 00 6D 00 61 00 69 00 6E 00 20 00 53 00 D.o.m.a. i.n. .S. [0060] 65 00 72 00 76 00 65 00 72 00 73 00 2C 00 43 00 e.r.v.e. r.s.,.C. [0070] 4E 00 3D 00 55 00 73 00 65 00 72 00 73 00 2C 00 N.=.U.s. e.r.s.,. [0080] 44 00 43 00 3D 00 63 00 6F 00 6D 00 70 00 61 00 D.C.=.c. o.m.p.a. [0090] 6E 00 79 00 33 00 2C 00 44 00 43 00 3D 00 64 00 n.y.3.,. D.C.=.d. [00A0] 64 00 00 00 d... flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:13:53 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:13:53 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x0000000000006d5f (27999) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x00000080 (128) __ndr_size_sid : 0x0000001c (28) guid : dc62f392-9a3d-4cd9-b909-6cdf1e5b24a8 sid : S-1-5-21-8659820-343394492-589173015-1108 __ndr_size_dn : 0x00000023 (35) dn : 'CN=user1,CN=Users,DC=company3,DC=dd' attid : UNKNOWN_ENUM_VALUE (0x200F4) value: struct drsuapi_DsAttributeValue __ndr_size : 0x0000020e (526) blob : * blob : DATA_BLOB length=526 [0000] 0E 02 00 00 00 00 00 00 F9 42 2D 84 F0 83 BA 4C ........ .B-....L [0010] B7 D4 49 2F 6A 63 28 E1 00 00 00 00 00 00 00 00 ..I/jc(. ........ skipping zero buffer bytes [0030] 00 00 00 00 EA 00 00 00 43 00 4E 00 3D 00 4D 00 ........ C.N.=.M. [0040] 61 00 69 00 6C 00 62 00 6F 00 78 00 20 00 53 00 a.i.l.b. o.x. .S. [0050] 74 00 6F 00 72 00 65 00 20 00 28 00 45 00 58 00 t.o.r.e. .(.E.X. [0060] 30 00 31 00 29 00 2C 00 43 00 4E 00 3D 00 46 00 0.1.).,. C.N.=.F. [0070] 69 00 72 00 73 00 74 00 20 00 53 00 74 00 6F 00 i.r.s.t. .S.t.o. [0080] 72 00 61 00 67 00 65 00 20 00 47 00 72 00 6F 00 r.a.g.e. .G.r.o. [0090] 75 00 70 00 2C 00 43 00 4E 00 3D 00 49 00 6E 00 u.p.,.C. N.=.I.n. [00A0] 66 00 6F 00 72 00 6D 00 61 00 74 00 69 00 6F 00 f.o.r.m. a.t.i.o. [00B0] 6E 00 53 00 74 00 6F 00 72 00 65 00 2C 00 43 00 n.S.t.o. r.e.,.C. [00C0] 4E 00 3D 00 45 00 58 00 30 00 31 00 2C 00 43 00 N.=.E.X. 0.1.,.C. [00D0] 4E 00 3D 00 53 00 65 00 72 00 76 00 65 00 72 00 N.=.S.e. r.v.e.r. [00E0] 73 00 2C 00 43 00 4E 00 3D 00 46 00 69 00 72 00 s.,.C.N. =.F.i.r. [00F0] 73 00 74 00 20 00 41 00 64 00 6D 00 69 00 6E 00 s.t. .A. d.m.i.n. [0100] 69 00 73 00 74 00 72 00 61 00 74 00 69 00 76 00 i.s.t.r. a.t.i.v. [0110] 65 00 20 00 47 00 72 00 6F 00 75 00 70 00 2C 00 e. .G.r. o.u.p.,. [0120] 43 00 4E 00 3D 00 41 00 64 00 6D 00 69 00 6E 00 C.N.=.A. d.m.i.n. [0130] 69 00 73 00 74 00 72 00 61 00 74 00 69 00 76 00 i.s.t.r. a.t.i.v. [0140] 65 00 20 00 47 00 72 00 6F 00 75 00 70 00 73 00 e. .G.r. o.u.p.s. [0150] 2C 00 43 00 4E 00 3D 00 43 00 6F 00 6D 00 70 00 ,.C.N.=. C.o.m.p. [0160] 61 00 6E 00 79 00 33 00 20 00 4F 00 72 00 67 00 a.n.y.3. .O.r.g. [0170] 61 00 6E 00 69 00 73 00 61 00 74 00 69 00 6F 00 a.n.i.s. a.t.i.o. [0180] 6E 00 2C 00 43 00 4E 00 3D 00 4D 00 69 00 63 00 n.,.C.N. =.M.i.c. [0190] 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 45 00 r.o.s.o. f.t. .E. [01A0] 78 00 63 00 68 00 61 00 6E 00 67 00 65 00 2C 00 x.c.h.a. n.g.e.,. [01B0] 43 00 4E 00 3D 00 53 00 65 00 72 00 76 00 69 00 C.N.=.S. e.r.v.i. [01C0] 63 00 65 00 73 00 2C 00 43 00 4E 00 3D 00 43 00 c.e.s.,. C.N.=.C. [01D0] 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 61 00 o.n.f.i. g.u.r.a. [01E0] 74 00 69 00 6F 00 6E 00 2C 00 44 00 43 00 3D 00 t.i.o.n. ,.D.C.=. [01F0] 63 00 6F 00 6D 00 70 00 61 00 6E 00 79 00 33 00 c.o.m.p. a.n.y.3. [0200] 2C 00 44 00 43 00 3D 00 64 00 64 00 00 00 ,.D.C.=. d.d... flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:28:26 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:28:26 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x0000000000008673 (34419) linked_attributes: struct drsuapi_DsReplicaLinkedAttribute identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000a4 (164) __ndr_size_sid : 0x0000001c (28) guid : dcacdd6f-2eee-4e6c-b142-214829878a02 sid : S-1-5-21-8659820-343394492-589173015-1112 __ndr_size_dn : 0x00000035 (53) dn : 'CN=Exchange Domain Servers,CN=Users,DC=company3,DC=dd' attid : DRSUAPI_ATTID_member (0x1F) value: struct drsuapi_DsAttributeValue __ndr_size : 0x00000086 (134) blob : * blob : DATA_BLOB length=134 [0000] 86 00 00 00 1C 00 00 00 55 1C 5F E2 CB B7 28 44 ........ U._...(D [0010] A3 5D 99 05 7E 1B 3F 52 01 05 00 00 00 00 00 05 .]..~.?R ........ [0020] 15 00 00 00 6C 23 84 00 BC C8 77 14 17 11 1E 23 ....l#.. ..w....# [0030] 57 04 00 00 26 00 00 00 43 00 4E 00 3D 00 45 00 W...&... C.N.=.E. [0040] 58 00 30 00 31 00 2C 00 43 00 4E 00 3D 00 43 00 X.0.1.,. C.N.=.C. [0050] 6F 00 6D 00 70 00 75 00 74 00 65 00 72 00 73 00 o.m.p.u. t.e.r.s. [0060] 2C 00 44 00 43 00 3D 00 63 00 6F 00 6D 00 70 00 ,.D.C.=. c.o.m.p. [0070] 61 00 6E 00 79 00 33 00 2C 00 44 00 43 00 3D 00 a.n.y.3. ,.D.C.=. [0080] 64 00 64 00 00 00 d.d... flags : 0x00000001 (1) 1: DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE originating_add_time : Wed Jan 27 01:17:41 PM 2016 UTC meta_data: struct drsuapi_DsReplicaMetaData version : 0x00000001 (1) originating_change_time : Wed Jan 27 01:17:41 PM 2016 UTC originating_invocation_id: ae22e205-5f46-48ef-b165-27df4468843b originating_usn : 0x00000000000085bb (34235) drs_error : WERR_OK result : WERR_OK dump OK