The right way to change the Energetic Listing Tombstone lifetime attribute | Hotline Tech

In case you did not know, the Tombstone Lifetime attribute determines how lengthy Energetic Listing retains an object earlier than completely deleting it. The default worth is 180 days for some server variations and 60 for others, however you possibly can modify this worth to satisfy your particular wants.

All Home windows Server 2003 SP1 and better servers have a tombstone lifetime of 180 days. Nonetheless, the tombstone lifetime for Home windows Server 2003 RTM, Home windows Server 2003 R2, and Home windows Server 2003 R2 is 60 days.

So, on this article, I’ll present you two strategiess to change Tombstone Lifetime on your AD forest. Particularly, this information has steps to perform the duty via ADSI Version and shell energy.

Lastly, you possibly can learn my FAQ part, the place I reply the questions most individuals ask about AD Tombstone Lifetime.

Modify Energetic Listing Tombstone Lifespan with ADSI Edit

He ADSI Version The software provides you the quickest technique to vary the AD Tombstone Lifetime attribute. Comply with the steps under to make use of this software to entry and modify the worth of the Tombstone Lifetime attribute.

1. Initially, search for ADSI Version and open it.

2. Then proper click on ADSI Version within the left pane and choose Hook up with…

3. Within the “Connection Settings” pop-up window, click on the Choose a well known naming context dropdown and choose Setting. The “Connection Settings” popup will now appear to be the second screenshot under.

   Then, to proceed, click on OK.

4. Whenever you clicked OK in step 3, ADSI Edit will add the “Configuration” context on your AD forest. To increase the context, click on on it. Then navigate to the trail under.

   To navigate, click on a node, then click on the arrow to the left to increase it.

Cofiguration => CN=Configuration => CN=Providers => CN=Home windows NT

5. Then proper click on CN=Listing Service and choose Properties.

6. Lastly, to regulate the Energetic Listing Tombstone Lifetime attribute, find the worth within the CN=Listing Service Properties and double click on on it.

   When the TombstoneLifetime attribute opens, modify the worth and click on OK; see my second screenshot under for extra particulars.

Change Energetic Listing Tombstone lifetime attribute with PowerShell

Like many different Energetic Listing duties, you possibly can modify the Tombstone Lifetime attribute of your AD forest by utilizing PowerShell.

The procedures are detailed under:

1. Run PowerShell as administrator. Then, to get the present worth of the Tombstone Lifetime attribute, run the next instructions:

$ADFNC = (Get-ADRootDSE).configurationNamingContext

(Get-ADObject -identity "CN=Listing Service,CN=Home windows NT,CN=Providers,$ADFNC” -properties "tombstonelifetime").tombstonelifetime

When you have not beforehand modified the Tombstone attribute, the command ought to return 180, which is the default worth.

2. Now to vary the worth, run this command…

The (Get-ADRootDSE).configurationNamingContext command, saved within the $ADFNC variable, returns the configuration naming context on your AD forest.

$ADFNC = (Get-ADRootDSE).configurationNamingContext

Set-ADObject -Id “CN=Listing Service,CN=Home windows NT,CN=Providers,$ADFNC” -Partition $ADFNC -Change @tombstonelifetime="213"

The final command units the Tombstone Lifetime attribute to 213 days (7 months). To verify that you just modified the worth efficiently, rerun the Get-ADObject command once more…

(Get-ADObject -identity "CN=Listing Service,CN=Home windows NT,CN=Providers,$ADFNC” -properties "tombstonelifetime").tombstonelifetime

Frequent questions

my remaining ideas

Earlier than you modify the Tombstone Lifetime attribute worth on your Energetic Listing forest, it is vital to grasp the implication.

Primarily, this worth impacts how lengthy AD retains deleted objects earlier than completely deleting them from the database. You need to be cautious when altering this worth as a result of it impacts your capacity to revive deleted objects.

Due to this fact, earlier than altering this worth, think about how usually you obtain requests to revive deleted objects.

When you’re positive you need to change the worth of the tombstone lifetime attribute, you need to use one of many strategies described on this article to vary it.

References and additional studying

1. Change Tombstone lifetime attribute in Energetic Listing | Petri IT Information Base
2. 16.18. Tombstone Lifetime Modification for a Area – Energetic Listing Cookbook [Book] (oreilly.com)
3. How can I examine the tombstone lifetime of my Energetic Listing forest? (windowstechno.com)
4. Ing. Alessandro Mazzanti: Microsoft: decide the lifetime of the tombstone for the forest