Modify the DC tombstone survival time

Modify DC Tombstone Survival Time

U Case Requirements

How do I change the time limit for an authoritative restore?

U Knowledge Tips

When you delete an object (such as a user account, OU, and so on) in AD, the object is not actually deleted, but is moved to a special container. When the object is eventually deleted, it is determined by the tombstone's survival time.

Tombstone lifetime refers to the time interval at which an object is deleted from the ad, to which the object is actually deleted, in Windows Server 2008, with a default value of 180 days, and 60 days in Windows $ server. When the object has been deleted for more than 180 days, it is actually deleted. Therefore, you should avoid restoring ad backups up to 180 days before it causes incomplete data in the ad.

By using the ADSI Edit tool, you can manually change the tombstone lifetime by following the steps below.

(1) Log in to the DC, open the "ADSI Edit" management tool in the admin tool, right-click on "ADSI Edit", and select "Connect to" command in the pop-up menu, as shown in 5.1.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image002 "border=" 0 "alt=" clip_image002 "src=" http://s3.51cto.com/wyfs02/M01/77/58/ Wkiol1zmssuqg4xcaaalvyuql90551.jpg "" 244 "height=" 173 "/>

Figure 5.1 Opening the ADSI Edit Administration tool

(2) Select a connection point in the Connection Settings window, select a well-known naming context for configuration, and then click the OK button, as shown in 5.2.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image004 "border=" 0 "alt=" clip_image004 "src=" http://s3.51cto.com/wyfs02/M02/77/58/ Wkiol1zmssywyoeoaabo-n7duui171.jpg "" 244 "height=" 222 "/>

Figure 5.2 Connection settings

(3) Double click "Configure" in the right window, then expand node "cn=configuration" → "cn=services" → "cn=windows NT" → "cn=directory Service", right click "Cn=directory Service ", in the pop-up menu, select" Properties ", as shown in 5.3.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; margin:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image006 "border=" 0 "alt=" clip_image006 "src=" http://s3.51cto.com/wyfs02/M01/77/5A/ Wkiom1zmsl2r1or1aaaumdlfd-w275.jpg "" 244 "height=" 173 "/>

Figure 5.3 Opening Cn=directory service Properties

(4) In the Cn=directory Service Properties window, locate the property "TombstoneLifetime" and double-click to edit its property value, as shown in 5.4. Click OK to close the window when the modification is complete.

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" clip_image008 "border=" 0 "alt=" clip_image008 "src=" http://s3.51cto.com/wyfs02/M01/77/5A/ Wkiom1zmsl7x9zqvaabjtywaws8410.jpg "" 239 "height=" 244 "/>

Figure 5.4 Modifying the Tomestonelifetime property value

Modify the DC tombstone survival time