You want to refresh a dynamic object to keep it from expiring and getting deleted from Active Directory.
In each solution below, an example of adding a user object is used. Modify the examples as needed to refresh whatever object is needed.
From the menu, select Connection Connect.
For Server, enter the name of a domain controller (or leave it blank to do a serverless bind).
For Port, enter 389.
From the menu, select Connection Bind.
Enter credentials of a user that can modify the object.
Select Browse Modify.
For Dn, enter the DN of the dynamic object you want to refresh.
For Attribute, enter entryTTL.
For Values, enter the new time to live (TTL) for the object in seconds.
Under Operation, select Replace.
Create an LDIF file called refresh_dynamic_object.ldf with the following contents:
dn: cn=jsmith,cn=users,dc=rallencorp,dc=com changetype: modify replace: entryTTL entryTTL: 1800 -
then run the following command:
> ldifde -v -i -f refresh_dynamic_object.ldf
set objUser = GetObject("LDAP://cn=jsmith,cn=users,dc=rallencorp,dc=com") objUser.Put "entryTTL", "1800" objUser.SetInfo
Dynamic objects expire after their TTL becomes 0. You can determine when a dynamic object will expire by looking at the current value of an object's entryTTL, which contains the seconds remaining until expiration. If you've created a dynamic object and need to refresh it so that it will not get deleted, you must reset the entryTTL attribute to a new value. There is no limit to the number of times you can refresh a dynamic object. As long as the entryTTL value does not reach 0, the object will remain in Active Directory.
Recipe 4.11 for modifying an object, and Recipe 4.14 for creating a dynamic object