I have had this issue before and not found a reliable method to remove
orphaned/mismatched trustees from the root of an NSS volume. (Netware 6.5)

These trustees are always the result of rebuilding a server (SYS: and NDS)
using an identical tree name and NDS structure. This includes matching
object names in the re-established NDS structure. After rebuilding and
re-establishing the new server (and NDS), the original data volumes (RAID
arrays) are re-attached to the new server.

I have tried:

1. Running DSREPAIR (inc Volume and Trustee check) and also
2. NSS /POOLVERIFY (returns no errors)
3. NSS /RESETIDCACHE and NSS /VISIBILITYREBUILD
4. TRUSTBAR -D
5. TRUSTEE REMOVE and TRUSTEE REMOVEINVALID
6. ConsoleOne, iManager, NWAdmin, Filer

Nothing seems to remove these old trustee's from the root of the volume.
I think part of the complication is that these trustees (from the previous
NDS tree) have matching object names in the newly established tree. I
expect all these tools try to delete the object but when they go to look
for the object in NDS they get confused because of the mismatch on actual
object ID. It also seems to only effect trustees assigned at the root of
a volume...

Although the two volumes I am working with are very large (6 and 8TB
respectively) the trustee assignments on them are very simple and
typically assigned at the root or first directory level. I have no
problem deleting all trustee assignments on the volume(s) and then
recreating them...

Does anyone have any suggestions? Be aware that this data is extremely
sensitive and valuable. I do not want to do an NSS /POOLRTEBUILD unless
absolutely necessary. If we lose any of this data it would be "very bad".

Thanks,
Ed