CNF objects are objects that occur in an Active Directory forest where there is a "collision" of a particular name where two different domain controllers have the same object. To ensure all objects are "unique" one of the objects gets appended with CNF followed by a GUID. In general, one of these objects should be deleted preferably the one with the older date or CNF in its name. But, either object can be valid. For more information, you an refer to the link below:

• http://www.windowsitpro.com/article/john-savills-windows-faqs/i-have-objects-in-my-active-directory-ad-domain-that-have-cnf-in-their-name-followed-by-a-globally-unique-identifier-guid-what-are-these-objects-
• http://technet.microsoft.com/en-us/library/bb727059.aspx