Hi there Andrew & Samba4, Here is an interesting thing I have found this afternoon. I decided to test LDAPCMP on a real-world setup You can see the diff for the domain partition where 10.191.10.95 (Windows2003 - functional level 2003) and 10.191.10.113 (Samba4 - vampired from Windows2003): root@darkstar:~/samba-master/source4# ./scripting/devel/ldapcmp * Ignored (DNS related) DNs in 10.191.10.95: DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=zah ari,DC=tk DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,D C=zahari,
Windows 7 X64,DC=tk DC=aroot-servers.net ,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=za hari,DC=tk DC=broot-servers.net ,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=za hari,DC=tk DC=croot-servers.net ,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=za hari,DC=tk DC=droot-servers.net ,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=za hari,DC=tk DC=eroot-servers.net ,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=za hari,DC=tk DC=froot-servers.net ,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=za hari,DC=tk DC=g.root-servers.net ,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=za hari,DC=tk DC=h.root-servers.net ,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=za hari,DC=tk DC=i.root-servers.net ,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=za hari,DC=tk DC=j.root-servers.net ,
Windows 7 Ultimate Product Key,DC=RootDNSServers,
Office 2007 Pro Serial,CN=MicrosoftDNS,CN=System,DC=zahari,DC=tk DC=k.root-servers.net ,
Microsoft Office 2007 Sale,DC=RootDNSServers,CN=MicrosoftDNS,
Office Ultimate 2007 Activation,CN=System,DC=zahari,DC=tk DC=zahari.tk,CN=MicrosoftDNS,CN=System,DC=zahari,D C=tk DC=@,DC=zahari.tk,CN=MicrosoftDNS,CN=System,DC=zah ari,DC=tk DC=win2003,DC=zahari.tk,CN=MicrosoftDNS,CN=System, DC=zahari,DC=tk DC