RE: [ActiveDir] Stupid question alert... where exactly is the tombstone value set?
Hi Susan, To clarify: the increased tombstone-lifetime is effective which every forest built on top of SP1, so you are also able to install WS2k3, then install SP1 (manually, Windows Update,..) and dcpromo your first domain controller for the forest afterwards. Your statement below assumes that it will be only effective with a slipstreamed media, which is not correct. Here's a striped down version of your cheat sheet - the page which tells you which AD-Features were changed with SP1 http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Booko fSP1/658a175c-486a-42ee-b3da-9b56de3d187c.mspx Gruesse - Sincerely, Ulf B. Simon-Weidner MVP-Book Windows XP - Die Expertentipps: http://tinyurl.com/44zcz Weblog: http://msmvps.org/UlfBSimonWeidner Website: http://www.windowsserverfaq.org Profile: http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214C811 D |-Original Message- |From: [EMAIL PROTECTED] |[mailto:[EMAIL PROTECTED] On Behalf Of Susan |Bradley, CPA aka Ebitz - SBS Rocks [MVP] |Sent: Sunday, October 16, 2005 4:44 AM |To: ActiveDir@mail.activedir.org |Subject: [ActiveDir] Stupid question alert... where exactly is |the tombstone value set? | |http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx?v ideoid=27 | |Okay so watching Eileen | |And question default on Windows 2003 is 60 days... default |on Windows 2003 sp1 is 180 days BUT many times I know |that these changes only occur on the SLIP/Clean install |versions of these OS's NOT on upgraded onessee below as to |confirmation of this | |btw...request please? When changes are made between SPs... |can we have a cheat sheet... a white paper of how to activate |all the versioning changes? | |Can someone help a SBSer who's googling.. uh..msnsearching on |where that value is set? I want to see what it is on my real |baby that got upgraded and see what it is on some test boxes I |have that are slip installed. | |http://www.microsoft.com/technet/prodtechnol/windowsserver2003/ |library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx | |*Extended storage of deleted objects.* The default period that |a copy of a deleted object is retained in Active Directory, |called the tombstone lifetime, is extended from 60 days to 180 |days. Longer tombstone lifetime decreases the chance that a |deleted object remains in the local directory of a |disconnected domain controller beyond the time when the object |is permanently deleted from online domain controllers. The |tombstone lifetime is not changed automatically when you |upgrade to Windows Server 2003 with SP1, but you can change |the tombstone lifetime manually after the upgrade. New forests |that are installed with Windows Server 2003 with SP1 have a |default tombstone lifetime of 180 days. For more information |about tombstone lifetime, see How the Data Store Works |http://go.microsoft.com/fwlink/?LinkId=38339. | | | |Considerations for Active Directory Services Backup [Active Directory]: |http://msdn.microsoft.com/library/en-us/ad/ad/considerations_fo r_active_directory_services_backup.asp?frame=true |Active Directory Operations Guide: Backup and Restore: |http://www.microsoft.com/technet/prodtechnol/windows2000serv/te |chnologies/activedirectory/maintain/opsguide/part1/adogd03.mspx | |-- |Letting your vendors set your risk analysis these days? |http://www.threatcode.com | |List info : http://www.activedir.org/List.aspx |List FAQ: http://www.activedir.org/ListFAQ.aspx |List archive: |http://www.mail-archive.com/activedir%40mail.activedir.org/ | List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Stupid question alert... where exactly is the tombstone value set?
SBS people shouldn't be playing with ADSIEDIT. ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Sunday, October 16, 2005 1:20 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? ...and it appears to not be on the OEM version of SBS sp1... geeze guys... SBSize this sucker and make it easier to find.. Windows 2003 ADSI Edit - Download and explore Active Directory Containers: http://www.computerperformance.co.uk/w2k3/utilities/adsi_edit.htm Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: For others spending their Saturday night looking for that dll... it's not installed by default... How to Change Display Names of Active Directory Users: http://support.microsoft.com/?kbid=250455 Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: We barely have a tree let alone a forest. David Adner wrote: This article below describes where to read it and how to change it. A value of not set assumes the default. The new 2003 SP1 180 day default is only implemented if a forest is built as 2003 SP1. If you simply install SP1 the value doesn't change. Looks like they even updated this link, although the wording is atrocious. http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Opera tions/f3df8a52-81ea-4a1d-9823-4e51fbd3422a.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Saturday, October 15, 2005 9:44 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx? videoid=27 Okay so watching Eileen And question default on Windows 2003 is 60 days... default on Windows 2003 sp1 is 180 days BUT many times I know that these changes only occur on the SLIP/Clean install versions of these OS's NOT on upgraded onessee below as to confirmation of this btw...request please? When changes are made between SPs... can we have a cheat sheet... a white paper of how to activate all the versioning changes? Can someone help a SBSer who's googling.. uh..msnsearching on where that value is set? I want to see what it is on my real baby that got upgraded and see what it is on some test boxes I have that are slip installed. http://www.microsoft.com/technet/prodtechnol/windowsserver2003 /library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx *Extended storage of deleted objects.* The default period that a copy of a deleted object is retained in Active Directory, called the tombstone lifetime, is extended from 60 days to 180 days. Longer tombstone lifetime decreases the chance that a deleted object remains in the local directory of a disconnected domain controller beyond the time when the object is permanently deleted from online domain controllers. The tombstone lifetime is not changed automatically when you upgrade to Windows Server 2003 with SP1, but you can change the tombstone lifetime manually after the upgrade. New forests that are installed with Windows Server 2003 with SP1 have a default tombstone lifetime of 180 days. For more information about tombstone lifetime, see How the Data Store Works http://go.microsoft.com/fwlink/?LinkId=38339. Considerations for Active Directory Services Backup [Active Directory]: http://msdn.microsoft.com/library/en-us/ad/ad/considerations_f or_active_directory_services_backup.asp?frame=true Active Directory Operations Guide: Backup and Restore: http://www.microsoft.com/technet/prodtechnol/windows2000serv/t echnologies/activedirectory/maintain/opsguide/part1/adogd03.mspx -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Stupid question alert... where exactly is the tombstone value set?
You guys are still seeing things from big server land. Think little. One DC. I only have on PDC... I dont' build any dcs for any forests... so for us. we have to go 'change' that figure in a sp1'd box otherwise we are still at 60 days. My box at home 'and' at the office are 60 days. My slip installed one is the only one with the new 180 value. I'm barely planting desktops let alone deploying forests. :-) Ulf B. Simon-Weidner wrote: Hi Susan, To clarify: the increased tombstone-lifetime is effective which every forest built on top of SP1, so you are also able to install WS2k3, then install SP1 (manually, Windows Update,..) and dcpromo your first domain controller for the forest afterwards. Your statement below assumes that it will be only effective with a slipstreamed media, which is not correct. Here's a striped down version of your cheat sheet - the page which tells you which AD-Features were changed with SP1 http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Booko fSP1/658a175c-486a-42ee-b3da-9b56de3d187c.mspx Gruesse - Sincerely, Ulf B. Simon-Weidner MVP-Book Windows XP - Die Expertentipps: http://tinyurl.com/44zcz Weblog: http://msmvps.org/UlfBSimonWeidner Website: http://www.windowsserverfaq.org Profile: http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214C811 D |-Original Message- |From: [EMAIL PROTECTED] |[mailto:[EMAIL PROTECTED] On Behalf Of Susan |Bradley, CPA aka Ebitz - SBS Rocks [MVP] |Sent: Sunday, October 16, 2005 4:44 AM |To: ActiveDir@mail.activedir.org |Subject: [ActiveDir] Stupid question alert... where exactly is |the tombstone value set? | |http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx?v ideoid=27 | |Okay so watching Eileen | |And question default on Windows 2003 is 60 days... default |on Windows 2003 sp1 is 180 days BUT many times I know |that these changes only occur on the SLIP/Clean install |versions of these OS's NOT on upgraded onessee below as to |confirmation of this | |btw...request please? When changes are made between SPs... |can we have a cheat sheet... a white paper of how to activate |all the versioning changes? | |Can someone help a SBSer who's googling.. uh..msnsearching on |where that value is set? I want to see what it is on my real |baby that got upgraded and see what it is on some test boxes I |have that are slip installed. | |http://www.microsoft.com/technet/prodtechnol/windowsserver2003/ |library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx | |*Extended storage of deleted objects.* The default period that |a copy of a deleted object is retained in Active Directory, |called the tombstone lifetime, is extended from 60 days to 180 |days. Longer tombstone lifetime decreases the chance that a |deleted object remains in the local directory of a |disconnected domain controller beyond the time when the object |is permanently deleted from online domain controllers. The |tombstone lifetime is not changed automatically when you |upgrade to Windows Server 2003 with SP1, but you can change |the tombstone lifetime manually after the upgrade. New forests |that are installed with Windows Server 2003 with SP1 have a |default tombstone lifetime of 180 days. For more information |about tombstone lifetime, see How the Data Store Works |http://go.microsoft.com/fwlink/?LinkId=38339. | | | |Considerations for Active Directory Services Backup [Active Directory]: |http://msdn.microsoft.com/library/en-us/ad/ad/considerations_fo r_active_directory_services_backup.asp?frame=true |Active Directory Operations Guide: Backup and Restore: |http://www.microsoft.com/technet/prodtechnol/windows2000serv/te |chnologies/activedirectory/maintain/opsguide/part1/adogd03.mspx | |-- |Letting your vendors set your risk analysis these days? |http://www.threatcode.com | |List info : http://www.activedir.org/List.aspx |List FAQ: http://www.activedir.org/ListFAQ.aspx |List archive: |http://www.mail-archive.com/activedir%40mail.activedir.org/ | List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Stupid question alert... where exactly is the tombstone value set?
uh.. because you can? :-) And I was interested to see how they documented the difference between pre sp1 and post sp1. I like how they did it. We don't dcpromo in SBSland unless we are migrating boxes. Truly, unless we are in the process of migration... the typical SBS admin/consultant never uses that command. Remember our annoying GUI wizards do that for us. The tools can easily be installed on any box. They just weren't on the particular cdrom I was looking at. [again ... folks.. if you ever do deploy SBS boxes.. don't do OEM] okay now going back to lurk mode. the adsiediting SBSer. Ulf B. Simon-Weidner wrote: So I'm curious why you would want to change the default anyways - if you only have one box you can decrease the tombstone-lifetime to whatever amount of days you want to be able to reanimate tombstones - which is not that important in a single server infrastructure anyways since you could also create new user-accounts and reacl the ressources if needed. And I didn't think big or little - just wanted to point out that every box which is dcpromoed into a new AD (forest) and has WS2k3SP1 underneath will get 180 day tombstones, every box which is dcpromoed into a new AD without SP1 still has 60 days. Just wanted to clarify that it does not depend on how you got SP1 on your machine (slipstreamed or manually installed), it only depends on if it was installed when you started dcpromo'ing. I'm pretty sure you'd be able to install SP1 on a SBS prior to running dcpromo, but you know that way better than I do. Ulf |-Original Message- |From: [EMAIL PROTECTED] |[mailto:[EMAIL PROTECTED] On Behalf Of Susan |Bradley, CPA aka Ebitz - SBS Rocks [MVP] |Sent: Sunday, October 16, 2005 7:27 PM |To: ActiveDir@mail.activedir.org |Subject: Re: [ActiveDir] Stupid question alert... where |exactly is the tombstone value set? | |You guys are still seeing things from big server land. | |Think little. One DC. | |I only have on PDC... I dont' build any dcs for any forests... |so for us. we have to go 'change' that figure in a sp1'd |box otherwise we are still at 60 days. My box at home 'and' |at the office are 60 days. |My slip installed one is the only one with the new 180 value. | |I'm barely planting desktops let alone deploying forests. :-) | |Ulf B. Simon-Weidner wrote: | |Hi Susan, | |To clarify: the increased tombstone-lifetime is effective which every |forest built on top of SP1, so you are also able to install |WS2k3, then |install SP1 (manually, Windows Update,..) and dcpromo your |first domain |controller for the forest afterwards. Your statement below |assumes that |it will be only effective with a slipstreamed media, which is |not correct. | |Here's a striped down version of your cheat sheet - the page which |tells you which AD-Features were changed with SP1 |http://www.microsoft.com/technet/prodtechnol/windowsserver2003 |/library/ |Booko fSP1/658a175c-486a-42ee-b3da-9b56de3d187c.mspx | |Gruesse - Sincerely, | |Ulf B. Simon-Weidner | | MVP-Book Windows XP - Die Expertentipps: http://tinyurl.com/44zcz | Weblog: http://msmvps.org/UlfBSimonWeidner | Website: http://www.windowsserverfaq.org | Profile: |http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B4 |89-F2F1214C811 |D | | | ||-Original Message- ||From: [EMAIL PROTECTED] ||[mailto:[EMAIL PROTECTED] On Behalf Of Susan ||Bradley, CPA aka Ebitz - SBS Rocks [MVP] ||Sent: Sunday, October 16, 2005 4:44 AM ||To: ActiveDir@mail.activedir.org ||Subject: [ActiveDir] Stupid question alert... where exactly is the ||tombstone value set? || ||http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx?v |ideoid=27 || ||Okay so watching Eileen || ||And question default on Windows 2003 is 60 days... default on ||Windows 2003 sp1 is 180 days BUT many times I know that these ||changes only occur on the SLIP/Clean install versions of these OS's ||NOT on upgraded onessee below as to confirmation of this || ||btw...request please? When changes are made between SPs... ||can we have a cheat sheet... a white paper of how to |activate all the ||versioning changes? || ||Can someone help a SBSer who's googling.. uh..msnsearching on where ||that value is set? I want to see what it is on my real baby |that got ||upgraded and see what it is on some test boxes I have that are slip ||installed. || ||http://www.microsoft.com/technet/prodtechnol/windowsserver2003/ ||library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx || ||*Extended storage of deleted objects.* The default period |that a copy ||of a deleted object is retained in Active Directory, called the ||tombstone lifetime, is extended from 60 days to 180 days. Longer ||tombstone lifetime decreases the chance that a deleted |object remains ||in the local directory of a disconnected domain controller |beyond the ||time when the object is permanently deleted from online domain ||controllers
RE: [ActiveDir] Stupid question alert... where exactly is the tombstone value set?
This article below describes where to read it and how to change it. A value of not set assumes the default. The new 2003 SP1 180 day default is only implemented if a forest is built as 2003 SP1. If you simply install SP1 the value doesn't change. Looks like they even updated this link, although the wording is atrocious. http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Opera tions/f3df8a52-81ea-4a1d-9823-4e51fbd3422a.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Saturday, October 15, 2005 9:44 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx? videoid=27 Okay so watching Eileen And question default on Windows 2003 is 60 days... default on Windows 2003 sp1 is 180 days BUT many times I know that these changes only occur on the SLIP/Clean install versions of these OS's NOT on upgraded onessee below as to confirmation of this btw...request please? When changes are made between SPs... can we have a cheat sheet... a white paper of how to activate all the versioning changes? Can someone help a SBSer who's googling.. uh..msnsearching on where that value is set? I want to see what it is on my real baby that got upgraded and see what it is on some test boxes I have that are slip installed. http://www.microsoft.com/technet/prodtechnol/windowsserver2003 /library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx *Extended storage of deleted objects.* The default period that a copy of a deleted object is retained in Active Directory, called the tombstone lifetime, is extended from 60 days to 180 days. Longer tombstone lifetime decreases the chance that a deleted object remains in the local directory of a disconnected domain controller beyond the time when the object is permanently deleted from online domain controllers. The tombstone lifetime is not changed automatically when you upgrade to Windows Server 2003 with SP1, but you can change the tombstone lifetime manually after the upgrade. New forests that are installed with Windows Server 2003 with SP1 have a default tombstone lifetime of 180 days. For more information about tombstone lifetime, see How the Data Store Works http://go.microsoft.com/fwlink/?LinkId=38339. Considerations for Active Directory Services Backup [Active Directory]: http://msdn.microsoft.com/library/en-us/ad/ad/considerations_f or_active_directory_services_backup.asp?frame=true Active Directory Operations Guide: Backup and Restore: http://www.microsoft.com/technet/prodtechnol/windows2000serv/t echnologies/activedirectory/maintain/opsguide/part1/adogd03.mspx -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Stupid question alert... where exactly is the tombstone value set?
We barely have a tree let alone a forest. David Adner wrote: This article below describes where to read it and how to change it. A value of not set assumes the default. The new 2003 SP1 180 day default is only implemented if a forest is built as 2003 SP1. If you simply install SP1 the value doesn't change. Looks like they even updated this link, although the wording is atrocious. http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Opera tions/f3df8a52-81ea-4a1d-9823-4e51fbd3422a.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Saturday, October 15, 2005 9:44 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx? videoid=27 Okay so watching Eileen And question default on Windows 2003 is 60 days... default on Windows 2003 sp1 is 180 days BUT many times I know that these changes only occur on the SLIP/Clean install versions of these OS's NOT on upgraded onessee below as to confirmation of this btw...request please? When changes are made between SPs... can we have a cheat sheet... a white paper of how to activate all the versioning changes? Can someone help a SBSer who's googling.. uh..msnsearching on where that value is set? I want to see what it is on my real baby that got upgraded and see what it is on some test boxes I have that are slip installed. http://www.microsoft.com/technet/prodtechnol/windowsserver2003 /library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx *Extended storage of deleted objects.* The default period that a copy of a deleted object is retained in Active Directory, called the tombstone lifetime, is extended from 60 days to 180 days. Longer tombstone lifetime decreases the chance that a deleted object remains in the local directory of a disconnected domain controller beyond the time when the object is permanently deleted from online domain controllers. The tombstone lifetime is not changed automatically when you upgrade to Windows Server 2003 with SP1, but you can change the tombstone lifetime manually after the upgrade. New forests that are installed with Windows Server 2003 with SP1 have a default tombstone lifetime of 180 days. For more information about tombstone lifetime, see How the Data Store Works http://go.microsoft.com/fwlink/?LinkId=38339. Considerations for Active Directory Services Backup [Active Directory]: http://msdn.microsoft.com/library/en-us/ad/ad/considerations_f or_active_directory_services_backup.asp?frame=true Active Directory Operations Guide: Backup and Restore: http://www.microsoft.com/technet/prodtechnol/windows2000serv/t echnologies/activedirectory/maintain/opsguide/part1/adogd03.mspx -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Stupid question alert... where exactly is the tombstone value set?
For others spending their Saturday night looking for that dll... it's not installed by default... How to Change Display Names of Active Directory Users: http://support.microsoft.com/?kbid=250455 Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: We barely have a tree let alone a forest. David Adner wrote: This article below describes where to read it and how to change it. A value of not set assumes the default. The new 2003 SP1 180 day default is only implemented if a forest is built as 2003 SP1. If you simply install SP1 the value doesn't change. Looks like they even updated this link, although the wording is atrocious. http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Opera tions/f3df8a52-81ea-4a1d-9823-4e51fbd3422a.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Saturday, October 15, 2005 9:44 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx? videoid=27 Okay so watching Eileen And question default on Windows 2003 is 60 days... default on Windows 2003 sp1 is 180 days BUT many times I know that these changes only occur on the SLIP/Clean install versions of these OS's NOT on upgraded onessee below as to confirmation of this btw...request please? When changes are made between SPs... can we have a cheat sheet... a white paper of how to activate all the versioning changes? Can someone help a SBSer who's googling.. uh..msnsearching on where that value is set? I want to see what it is on my real baby that got upgraded and see what it is on some test boxes I have that are slip installed. http://www.microsoft.com/technet/prodtechnol/windowsserver2003 /library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx *Extended storage of deleted objects.* The default period that a copy of a deleted object is retained in Active Directory, called the tombstone lifetime, is extended from 60 days to 180 days. Longer tombstone lifetime decreases the chance that a deleted object remains in the local directory of a disconnected domain controller beyond the time when the object is permanently deleted from online domain controllers. The tombstone lifetime is not changed automatically when you upgrade to Windows Server 2003 with SP1, but you can change the tombstone lifetime manually after the upgrade. New forests that are installed with Windows Server 2003 with SP1 have a default tombstone lifetime of 180 days. For more information about tombstone lifetime, see How the Data Store Works http://go.microsoft.com/fwlink/?LinkId=38339. Considerations for Active Directory Services Backup [Active Directory]: http://msdn.microsoft.com/library/en-us/ad/ad/considerations_f or_active_directory_services_backup.asp?frame=true Active Directory Operations Guide: Backup and Restore: http://www.microsoft.com/technet/prodtechnol/windows2000serv/t echnologies/activedirectory/maintain/opsguide/part1/adogd03.mspx -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] Stupid question alert... where exactly is the tombstone value set?
...and it appears to not be on the OEM version of SBS sp1... geeze guys... SBSize this sucker and make it easier to find.. Windows 2003 ADSI Edit - Download and explore Active Directory Containers: http://www.computerperformance.co.uk/w2k3/utilities/adsi_edit.htm Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: For others spending their Saturday night looking for that dll... it's not installed by default... How to Change Display Names of Active Directory Users: http://support.microsoft.com/?kbid=250455 Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: We barely have a tree let alone a forest. David Adner wrote: This article below describes where to read it and how to change it. A value of not set assumes the default. The new 2003 SP1 180 day default is only implemented if a forest is built as 2003 SP1. If you simply install SP1 the value doesn't change. Looks like they even updated this link, although the wording is atrocious. http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Opera tions/f3df8a52-81ea-4a1d-9823-4e51fbd3422a.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Saturday, October 15, 2005 9:44 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx? videoid=27 Okay so watching Eileen And question default on Windows 2003 is 60 days... default on Windows 2003 sp1 is 180 days BUT many times I know that these changes only occur on the SLIP/Clean install versions of these OS's NOT on upgraded onessee below as to confirmation of this btw...request please? When changes are made between SPs... can we have a cheat sheet... a white paper of how to activate all the versioning changes? Can someone help a SBSer who's googling.. uh..msnsearching on where that value is set? I want to see what it is on my real baby that got upgraded and see what it is on some test boxes I have that are slip installed. http://www.microsoft.com/technet/prodtechnol/windowsserver2003 /library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx *Extended storage of deleted objects.* The default period that a copy of a deleted object is retained in Active Directory, called the tombstone lifetime, is extended from 60 days to 180 days. Longer tombstone lifetime decreases the chance that a deleted object remains in the local directory of a disconnected domain controller beyond the time when the object is permanently deleted from online domain controllers. The tombstone lifetime is not changed automatically when you upgrade to Windows Server 2003 with SP1, but you can change the tombstone lifetime manually after the upgrade. New forests that are installed with Windows Server 2003 with SP1 have a default tombstone lifetime of 180 days. For more information about tombstone lifetime, see How the Data Store Works http://go.microsoft.com/fwlink/?LinkId=38339. Considerations for Active Directory Services Backup [Active Directory]: http://msdn.microsoft.com/library/en-us/ad/ad/considerations_f or_active_directory_services_backup.asp?frame=true Active Directory Operations Guide: Backup and Restore: http://www.microsoft.com/technet/prodtechnol/windows2000serv/t echnologies/activedirectory/maintain/opsguide/part1/adogd03.mspx -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Stupid question alert... where exactly is the tombstone value set?
Install the support tools from the support folder of your iwndows 2003 CD (cd1 of sbs in this case). It will do the registration and all that. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Sunday, October 16, 2005 1:20 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? ...and it appears to not be on the OEM version of SBS sp1... geeze guys... SBSize this sucker and make it easier to find.. Windows 2003 ADSI Edit - Download and explore Active Directory Containers: http://www.computerperformance.co.uk/w2k3/utilities/adsi_edit.htm Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: For others spending their Saturday night looking for that dll... it's not installed by default... How to Change Display Names of Active Directory Users: http://support.microsoft.com/?kbid=250455 Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: We barely have a tree let alone a forest. David Adner wrote: This article below describes where to read it and how to change it. A value of not set assumes the default. The new 2003 SP1 180 day default is only implemented if a forest is built as 2003 SP1. If you simply install SP1 the value doesn't change. Looks like they even updated this link, although the wording is atrocious. http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Opera tions/f3df8a52-81ea-4a1d-9823-4e51fbd3422a.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Saturday, October 15, 2005 9:44 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx? videoid=27 Okay so watching Eileen And question default on Windows 2003 is 60 days... default on Windows 2003 sp1 is 180 days BUT many times I know that these changes only occur on the SLIP/Clean install versions of these OS's NOT on upgraded onessee below as to confirmation of this btw...request please? When changes are made between SPs... can we have a cheat sheet... a white paper of how to activate all the versioning changes? Can someone help a SBSer who's googling.. uh..msnsearching on where that value is set? I want to see what it is on my real baby that got upgraded and see what it is on some test boxes I have that are slip installed. http://www.microsoft.com/technet/prodtechnol/windowsserver2003 /library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx *Extended storage of deleted objects.* The default period that a copy of a deleted object is retained in Active Directory, called the tombstone lifetime, is extended from 60 days to 180 days. Longer tombstone lifetime decreases the chance that a deleted object remains in the local directory of a disconnected domain controller beyond the time when the object is permanently deleted from online domain controllers. The tombstone lifetime is not changed automatically when you upgrade to Windows Server 2003 with SP1, but you can change the tombstone lifetime manually after the upgrade. New forests that are installed with Windows Server 2003 with SP1 have a default tombstone lifetime of 180 days. For more information about tombstone lifetime, see How the Data Store Works http://go.microsoft.com/fwlink/?LinkId=38339. Considerations for Active Directory Services Backup [Active Directory]: http://msdn.microsoft.com/library/en-us/ad/ad/considerations_f or_active_directory_services_backup.asp?frame=true Active Directory Operations Guide: Backup and Restore: http://www.microsoft.com/technet/prodtechnol/windows2000serv/t echnologies/activedirectory/maintain/opsguide/part1/adogd03.mspx -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Stupid question alert... where exactly is the tombstone value set?
Or http://www.microsoft.com/downloads/details.aspx?FamilyID=6ec50b78-8be1-4e81- b3be-4e7ac4f0912dDisplayLang=en Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Sunday, October 16, 2005 1:45 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? Install the support tools from the support folder of your iwndows 2003 CD (cd1 of sbs in this case). It will do the registration and all that. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Sunday, October 16, 2005 1:20 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? ...and it appears to not be on the OEM version of SBS sp1... geeze guys... SBSize this sucker and make it easier to find.. Windows 2003 ADSI Edit - Download and explore Active Directory Containers: http://www.computerperformance.co.uk/w2k3/utilities/adsi_edit.htm Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: For others spending their Saturday night looking for that dll... it's not installed by default... How to Change Display Names of Active Directory Users: http://support.microsoft.com/?kbid=250455 Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote: We barely have a tree let alone a forest. David Adner wrote: This article below describes where to read it and how to change it. A value of not set assumes the default. The new 2003 SP1 180 day default is only implemented if a forest is built as 2003 SP1. If you simply install SP1 the value doesn't change. Looks like they even updated this link, although the wording is atrocious. http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Opera tions/f3df8a52-81ea-4a1d-9823-4e51fbd3422a.mspx -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Saturday, October 15, 2005 9:44 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Stupid question alert... where exactly is the tombstone value set? http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx? videoid=27 Okay so watching Eileen And question default on Windows 2003 is 60 days... default on Windows 2003 sp1 is 180 days BUT many times I know that these changes only occur on the SLIP/Clean install versions of these OS's NOT on upgraded onessee below as to confirmation of this btw...request please? When changes are made between SPs... can we have a cheat sheet... a white paper of how to activate all the versioning changes? Can someone help a SBSer who's googling.. uh..msnsearching on where that value is set? I want to see what it is on my real baby that got upgraded and see what it is on some test boxes I have that are slip installed. http://www.microsoft.com/technet/prodtechnol/windowsserver2003 /library/TechRef/54094485-71f6-4be8-8ebf-faa45bc5db4c.mspx *Extended storage of deleted objects.* The default period that a copy of a deleted object is retained in Active Directory, called the tombstone lifetime, is extended from 60 days to 180 days. Longer tombstone lifetime decreases the chance that a deleted object remains in the local directory of a disconnected domain controller beyond the time when the object is permanently deleted from online domain controllers. The tombstone lifetime is not changed automatically when you upgrade to Windows Server 2003 with SP1, but you can change the tombstone lifetime manually after the upgrade. New forests that are installed with Windows Server 2003 with SP1 have a default tombstone lifetime of 180 days. For more information about tombstone lifetime, see How the Data Store Works http://go.microsoft.com/fwlink/?LinkId=38339. Considerations for Active Directory Services Backup [Active Directory]: http://msdn.microsoft.com/library/en-us/ad/ad/considerations_f or_active_directory_services_backup.asp?frame=true Active Directory Operations Guide: Backup and Restore: http://www.microsoft.com/technet/prodtechnol/windows2000serv/t echnologies/activedirectory/maintain/opsguide/part1/adogd03.mspx -- Letting your vendors set your risk analysis these days? http://www.threatcode.com List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ -- Letting your vendors set
