Mastering Active Directory

Active Directory Recycle Bin

The most common Active Directory related disasters are due to accidentally deleted objects. Once the object is deleted from Active Directory, it is not permanently deleted. As soon as an object is deleted, it will set the isDeleted object value to True and move the object under CN=Deleted Objects:

Then, it stays there until system reaches the tombstone lifetime value. By default, it is 180 days, and this can be change if required. As soon as the object passes the tombstone lifetime, it is available for permanent deletion. When I explained about the Active Directory database in the previous section, I mentioned ...