Location: List Archives

List Archives

This forum is an archive of all posts to our mailing list over the past few years.  The forum is set read only therefore to contribute you will need to join our list community.  See more info about this here.

 

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Subject: [ActiveDir] Delete only one object in the Tombstone.
Prev Next
You are not authorized to post a reply.

AuthorMessages
Yann TiroaUser is Offline

Posts:0

05/22/2006 8:59 AM  
Message body was not found.
lists1User is Offline

Posts:4

05/22/2006 9:17 AM  
Gruesse - Sincerely,

Ulf B. Simon-Weidner

Profile & Publications:

http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214C811
D
Weblog:
http://msmvps.org/UlfBSimonWeidner
Website:
http://www.windowsserverfaq.org

_____

From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of TIROA YANN
Sent: Monday, May 22, 2006 10:56 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE : [ActiveDir] Delete only one object in the Tombstone.
Hello Ulf,

Thank you very much for your answer and have a nice day.

Best Regards,

Yann

_____

De: ActiveDir-owner@xxxxxxxxxxxxxxxxxx de la part de Ulf B. Simon-Weidner
Date: lun. 22/05/2006 14:34
À: ActiveDir@xxxxxxxxxxxxxxxxxx
Objet : RE: [ActiveDir] Delete only one object in the Tombstone.
Hello Tiroa,

it is not possible to purge Tombstones, no matter if one or all. For all
you'd be able to modify tombstone lifetime and the system time, however I
strongly doubt this would be supported by MS (tombstone-lifetime is
supported, modifying systemtime to enforce garbage collection of tombstones
most likely not).

Gruesse - Sincerely,

Ulf B. Simon-Weidner

Profile & Publications:
http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214C811
D
Weblog: http://msmvps.org/UlfBSimonWeidner
Website: http://www.windowsserverfaq.org

_____

From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of TIROA YANN
Sent: Monday, May 22, 2006 10:59 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Delete only one object in the Tombstone.
Hello,

I'd like to know if it is possible to delete *only one* object in the
tombstone instead of purging all the objects ?

Thanks,

Yann

>
lists1User is Offline

Posts:4

05/22/2006 12:34 PM  
Hello
Tiroa,

it is not
possible to purge Tombstones, no matter if one or all. For all you'd be able to
modify tombstone lifetime and the system time, however I strongly doubt this
would be supported by MS (tombstone-lifetime is supported, modifying systemtime
to enforce garbage collection of tombstones most likely
not).
Gruesse -
Sincerely,
Ulf B.
Simon-Weidner
  Profile
& Publications:   http://mvp.support.microsoft.com/profile="">     Weblog: http://msmvps.org/UlfBSimonWeidner  Website: http://www.windowsserverfaq.org




From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of TIROA
YANNSent: Monday, May 22, 2006 10:59 AMTo:
ActiveDir@xxxxxxxxxxxxxxxxxxSubject: [ActiveDir] Delete only one
object in the Tombstone.

Hello,

I'd like to know if it is possible to delete
*only one* object in the tombstone instead of purging all the objects
?

Thanks,

Yann
GuidoGUser is Offline

Posts:63

05/23/2006 2:36 AM  
hmm - what would be the reason why you'd want to purge a
single deleted object (tombstone) from your AD?  What secret information
does the tombstone contain, that you don't wish remains in it?  Realize
that there are hardly any attributes that remain in the tombstone by default,
unless you've changed the searchflags of your attributes to include
more.

E.g. by default, only the following attributes are kept in
a user account's tombstone from the searchflags are:
Instance-TypeLegacy-Exchange-DNNT-Security-DescriptorObject-ClassObject-GuidObject-SidRepl-Property-Meta-DataSAM-Account-NameSystem-FlagsuidUser-Account-ControlUSN-ChangedUSN-Created
Note that a few other attributes are hardcoded in
AD to remain in the tombstone. If these really contain anything critical
you'd want to get rid of (maybe in the name attribute etc.), you'd have the
option to reanimate the tombstone (undelete) and then edit it appropriately, and
delete it again :-). I'm actually unsure if the system allows you to edit
the object in the deleted items container directly - might be worth a
try.

/Guido
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Ulf B.
Simon-WeidnerSent: Montag, 22. Mai 2006 14:34To:
ActiveDir@xxxxxxxxxxxxxxxxxxSubject: RE: [ActiveDir] Delete only one
object in the Tombstone.

Hello
Tiroa,

it is not
possible to purge Tombstones, no matter if one or all. For all you'd be able to
modify tombstone lifetime and the system time, however I strongly doubt this
would be supported by MS (tombstone-lifetime is supported, modifying systemtime
to enforce garbage collection of tombstones most likely
not).
Gruesse -
Sincerely,
Ulf B.
Simon-Weidner
  Profile
& Publications:   http://mvp.support.microsoft.com/profile="">     Weblog: http://msmvps.org/UlfBSimonWeidner  Website: http://www.windowsserverfaq.org




From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of TIROA
YANNSent: Monday, May 22, 2006 10:59 AMTo:
ActiveDir@xxxxxxxxxxxxxxxxxxSubject: [ActiveDir] Delete only one
object in the Tombstone.

Hello,

I'd like to know if it is possible to delete
*only one* object in the tombstone instead of purging all the objects
?

Thanks,

Yann
You are not authorized to post a reply.
Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] Delete only one object in the Tombstone.



ActiveForums 3.7
AdventNet Banner
Friends

Friends

Namescape
Members

Members

MembershipMembership:
Latest New UserLatest:kosciesza69
New TodayNew Today:3
New YesterdayNew Yesterday:1
User CountOverall:4319

People OnlinePeople Online:
VisitorsVisitors:85
MembersMembers:0
TotalTotal:85

Online NowOnline Now:

Ads

Copyright 2008 ActiveDir.org
Terms Of Use