What is an Incremental Accounts Cache Refresh and how does it work? (NETIQKB7681)

  • 7707681
  • 02-Feb-2007
  • 19-Jun-2007

Resolution

goal
What is an Incremental Accounts Cache Refresh and how does it work?

fact
Directory and Resource Administrator 6.50

fact
Directory and Resource Administrator 6.60

fact
Directory and Resource Administrator 7.x

fact
Directory and Resource Administrator 8.0

fix

An Incremental Accounts Cache Refresh updates only the data that changed since the last full Accounts Cache Refresh. The incremental refresh provides a streamlined way for Directory and Resource Administrator (DRA) to keep up with the changing Active Directory by quickly updating the accounts cache while incurring the least impact on the enterprise.

ADDITIONAL QUESTIONS AND ANSWERS

Can the Incremental Accounts Cache Refresh be set for Trusted domains as well?
Yes, the Incremental Accounts Cache refresh can be set for trusted as well as managed domains.

Is the Incremental Accounts Cache Refresh also available for NT domains and member servers?
No, the Incremental Accounts Cache refresh is only available for all managed and trusted Active Directory domains.

How frequently can an Incremental Accounts Cache Refresh be scheduled?
The Incremental Accounts Cache refresh can be scheduled to run at intervals of every 15 minutes to once a day for DRA 7.5 and later and every 30 minutes to once a day for DRA 7.0 and earlier.

How can I modify the Incremental Accounts Cache Refresh interval?

For DRA 6.x:

  1. Using the MMC interface select the Configuration| Managed and trusted domains node.
  2. Select a managed domain and click Properties.
  3. Select the Schedule tab in the Domain Properties dialog.

For DRA 7.x and later:

  1. Using the Delegation and Configuration console, select Configuration Management and Managed Domains.
  2. Select a managed domain, right-click and select Properties.
  3. Select the Schedule tab to change the Accounts cache refresh schedule.

What information does the Incremental Accounts Cache Refresh gather?
The Incremental Accounts Cache Refresh gathers the following data:

  • New and cloned objects
  • Deleted and moved objects
  • Group memberships
  • All cached object properties

How does the Incremental Accounts Cache Refresh work?
The Incremental Accounts Cache Refresh is based on the USN value.  Each attribute in Active Directory is assigned a USN value.  The domain controller increments the USN value when the object is modified.  The Incremental Accounts Cache Refresh queries Active Directory for all objects with a USN value higher than the last USN value used.

Does the Incremental Accounts Cache Refresh honor the DcPreferred value?
Yes, the Incremental Accounts Cache Refresh honors the DcPreferred value.  For more information on the DcPreferred option see the following knowledge base article:

  • NETIQKB1885 - How do I configure the Directory and Resource Administrator server to write all changes to a specific domain controller?



Additional Information

Formerly known as NETIQKB7681