NNS ADix - How to...Reanimate Active Directory Tombstones
   

General Information:

When an Active Directory object is deleted, the object is not immediately removed from the Active Directory
database. Instead, the object will be turned into a tombstone. This is because the object deletion must be propagated
to other domain controllers.
NNS ADix enables you to conveniently reanimate Active Directory tombstones.

The following changes will be made to an object when it is deleted:
    - The value of the "isDeleted" attribute is set to "TRUE"
    - Most of the attribute values are stripped of
    - The object will be renamed to something like CN=oldRDN\0ADEL:objectGUID and
      moved to a special container in the objects naming context called "CN=Deleted Objects"
    - The distinguished name of the objects original location will be saved in an attribute called "lastKnownParent"
      (this feature is supported on Windows Server 2003 or higher)

Tombstones are removed from the Active Directory database after the tombstone lifetime has expired.
The default tombstone lifetimes are...
    - Forest initially built using Windows Server 2000/Windows Server 2003: 60 days
    - Forest initially built using Windows Server 2003 SP1 or higher: 180 days

Note:
    Windows Server 2008 R2 has a new feature called "Active Directory Recycle Bin". This feature enables you to retain
    all link-valued and non-link-valued attributes of the deleted Active Directory objects. This values are preserved and the objects are restored
    in their entirety to the same consistent logical state that they were in immediately before deletion. For example, restored user accounts
    automatically regain all group memberships and corresponding access rights that they had immediately before deletion, within and across domains.

    Please refer to the following link to get more information about enabling and using this feature: Active Directory Recycle Bin Step-by-Step Guide

Reanimating Tombstones:

NNS ADix provides two capabilities to reanimate tombstones:
    - The Query Filter Preview dialog
    - The AD Browser

To reanimate tombstones using the Query Filter Preview dialog...

To reanimate tombstones using the AD Browser...

 

Copyright © 2008 by NNS - Nigl Network Solutions