0
The number of days before a deleted object is removed from the directory services This assists in removing objects from replicated servers and preventing restores from reintroducing a deleted object?
Wiki User
∙ 13y ago
The tombstone lifetime in an Active Directory forest determines how long a deleted object - aka a 'tombstone' - is retained in Active Directory. The tombstone lifetime is determined by the value of the tombstoneLifetime attribute on the Directory Service object in the configuration directory partition.Tombstone Lifetime assists in removing objects from replicated servers and preventing restores from reintroducing a deleted object. Actually when an object is deleted from Active Directory, it is not physically removed from the Active Directory for some days. Instead, the Active Directory sets the 'isDeleted' attribute of the deleted object to TRUE and move it to a special container called 'Tombstone'.
The default Tombstone Life time period is 60 days in Windows Server 2003 But the default Tombstone Lifetime period has been changed in Windows Server 2003 SP1 and later to 180 days.
The tombstone lifetime attribute remains same on all the domain controllers and it is deleted from all the servers at the same time. This is because the expiration of a tombstone lifetime is based on the time when an object was deleted logically from the Active Directory, rather than the time when it is received as a tombstone on a server through replication.Reconfiguring Tombstone Lifetime:
Default period of Tombstone Life time is 180 days in Windows Server 2003 SP2 or later. This is because the value of tombstoneLiftetime object is The default Tombstone Lifetime can be modified through ADSIEDIT console, if necessary. the longer tombstone lifetime decreases the chance that a deleted object remains in the local directory of a disconnected DC beyond the time when the object is permanently deleted from online DCs.
This attribute is located in the below path:
cn=Directory Service,cn=Windows NT,cn=Services,cn=Configuration,dc=To Change the Value,
go to:Run > ADSIEDIT.mscExpand: Configuration
> CN= Configuration > CN=Services > CN=Windows NT > and right click on CN= Directory ServiceYou will get an attribute window, Drill down to tombstoneLiftime, and double click it. You will get a field to type down the value, type the value you intended and click OK.
Wiki User
∙ 13y ago
Add your answer:
Earn +20 pts
What is tombstone lifetime attribute?
The number of days before a deleted object is removed from the directory services. This assists in removing objects from replicated servers and preventing restores from reintroducing a deleted object. This value is in the Directory Service object in the configuration NIC by default 2000 (60 days) 2003 (180 days)
What are typical access rights that may be performed on a directory?
A directory can be created or deleted, can be modified by adding/changing/removing contents, permissions can be changed, as well as primary ownership and primary group membership. In short, most operations you can do on a file can also be done on a directory. Additional things for a directory are that they can be searched.
What command would you use to remove a directory on a UNIX server?
If you are just removing the directory, use the command: rmdir dir-name The dir-name directory has to be empty for this to work. If there are files or other subdirectories then use the command: rm -rf dir-name
What is different between sterile and disinfectant?
If refering to being clean, sterilization is preventing infection and disinfection is removing an existing contamination.
What is the difference between sterilization and disinfection?
If refering to being clean, sterilization is preventing infection and disinfection is removing an existing contamination.
What is a High-density lipoprotein?
It is a type of lipoprotein that protects against coronary artery disease by removing cholesterol deposits from arteries or preventing their formation
Can you move out of state with your kids if the father has temporary custody?
No. You cannot move out of state without notifying the court. The other parent can file an injunction preventing your removing the children from the jurisdiction of the court and if youare not the parent with temporary custody then you could be arrested.
What was the type of government that replaced the French monarchy after the French Revolution?
The French consulate, designed by Napoleon.
What is STARVATION to put out a fire?
Preventing oxygen from participating in the combustion process is "Suffocation". Removing the fuel is "Starvation". To starve a wood fire, you remove logs from the fire.
Is riddex pest control effective?
According to several online reports Riddex is effective in removing pests from homes and preventing their return. They have a satisfactory record. http://www.riddex.org/electronic-pest-control-with-riddex
What happens if you put peanuts in a gas tank?
Any foreign objects in a gas tank will eventually clog the out take of the tank and cause the fuel pressure to drop effectively preventing the gas from reaching the engine and stalling the car. Removing them is costly since it requires removing the gas tank to drain it and clean the foreign objects out.
What are surgical treatments for snoring?
Surgical treatments for snoring include several different techniques for removing tissue from the back of the patient's throat, reshaping the nasal passages or jaw, or preventing the tongue from blocking the airway during sleep.
