Hi,I have a problem with old computer that don't delete by the Delete aged discovery data. I also have problem that ad discovery don't create some DDR records. So to the question.How is the delete aged discovery data working? do it check the ddr time stamp or should it delete objects that don't have a ddr?BRJeppe

ddr's should be processed and deleted, they don't hang around. If they are still in one of your inboxes you have a problem. John Marcum | http://www.TrueSec.com/en/Training.htm | http://myitforum.com/cs2/blogs/jmarcum

The problem we have is that in our SCCM the old discovery data isn't deleted and the SMS_AD_SYSTEM_DISCOVERY_AGENT is generating warnings that"SMS Active Directory System Discovery Agent reported errors for xxxx objects. DDR's were generated for 0 objects that had errors while reading non-critical properties. DDR's were not generated for xxxx objects that had errors while reading critical properties. Possible cause: The SMS Service might not have access to some properties of this object. The container specified might not have the properties available.Solution: Please verify the Active Directory schema for properties that are not replicated or locked. Refer to the discovery logs for more information."We have almost twice as many computers in the SCCM as we should.So my question how is the "Delete aged discovery data" service working? Do it read the DDR to see if there is old data or should it remove object that don't have a ddr. Or I'm I totally wrong and should i look elsewhere for reasons for "Delete aged discovery data" not working. I'm running some test to exclude ad access issues.

How often are you running AD System discovery?John Marcum | http://www.TrueSec.com/en/Training.htm | http://myitforum.com/cs2/blogs/jmarcum

Once every hour

Do you have AD Systems changing that much? Really you should run this about every 24 hours. Some people run the Group discovery more due to how they have their collections setup. http://www.sccm-tools.com http://sms-hints-tricks.blogspot.com

I know that it might be extremely often and the discovery takes almost 30-35min. But do that affect the deletion of old discovery data?

Once every hour That's why it's broke. Change that to run no more than once every 8 hours. Once per day is even better. You have to giv it time to run and complete processing before it runs again or it creates tons of duplicates. If you really think you need it once per hour get Enhance System Discovery from Steve Bobosky.John Marcum | http://www.TrueSec.com/en/Training.htm | http://myitforum.com/cs2/blogs/jmarcum

Thanks!I will change that and reply the result here when it's done.

I did change all my discovery methods to run once a day over the weekend but it still doesn’t delete old data. Is there any downside to make a collection for my old discovery data objects and select delete special? Patch the SCCM (still sp1) and se if it works better after patching. //Jeppe

Are we talking about removing excess .ddr files? Maybe I am confused, how would we do a collection of ddrs?John Marcum | http://www.TrueSec.com/en/Training.htm | http://myitforum.com/cs2/blogs/jmarcum