I’m still confused. What’s
the point of dstombstoneinterval if you can only raise the value to 30 seconds?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de
Sent: Wednesday, September 14,
2005 7:08 AM
To: [email protected]
Subject: RE: [ActiveDir] Tombstone Interval
Scavenging
and Aging are processes that age and cleanup (delete) unused DNS resource
records. After a record is deleted it is tombstoned and kept in AD for the same
time as the AD tombstone lifetime (60 days or 180 days in fresh AD SP1 installs).
However there is something else "in between" for DNS records.
I got the
second from the Windows 2003 Branch Office Guide.
You must extend the tombstone lifetime for DNS
resource records stored in the directory. This prevents resource records from
being removed from the directory while a new branch office domain controller is
offline and being shipped to its new location.
First I
did not understand it, but after testing it on a DC I found the following and
it is clear now what it does
A DNS
object is just like any other AD object... There is a slight difference though
When a
DNS object is deleted it is NOT AD tombstoned right away like other objects and
it is also not "moved" to the Deleted Objects container of the naming
context it resides it. Unlike any other objects it is invisible in the DNS GUI
and it remains in the location for the DNS Tombstone Lifetime (don't know what
the default is). When it is DNS tombstoned the attribute dNSTombstoned is set
to TRUE. After the DNS Tombstone Lifetime it is AD tombstoned and
"moved" to the Deleted Objects container of the naming context it
resides it.
If the
DNS object is "recreated" within the DNS Tombstone Lifetime the old
DNS tombstoned object is revived (same GUID) as the attribute dNSTombstoned is
set to FALSE .
If
someone knows the default, please let me know.
Cheers,
Jorge
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, September 14,
2005 12:08
To: [email protected]
Subject: RE: [ActiveDir] Tombstone Interval
Would the latter refer to scavenged
objects?
---------------------------------------
Neil Ruston
Nomura International Plc
Tel: 020 7521 3481
[EMAIL PROTECTED]
-----Original Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Almeida Pinto, Jorge de
Sent: 14 September 2005 10:58
To: [email protected]
Subject: [ActiveDir] Tombstone Interval
Hi,
The first I understand but
I do not understand the second. Does anyone know what the second does?
Thanks
Jorge
(1) configured per forest
in AD
The tombstone lifetime value in an Active Directory forest defines the default
number of days that a domain controller preserves knowledge of deleted objects.
This value also defines the useful life of a system state backup that is used
for disaster recovery or installation from backup media. Active Directory
protects itself from restoring data that is older than the tombstone lifetime
by disallowing the restore.
(2) configured per DNS
server in the registry manually or through DNSCMD
/dstombstoneinterval[ 1-30]
Amount of time in seconds to keep tombstoned records in Active Directory alive.
Met
vriendelijke groet / Kind regards,
Jorge de Almeida Pinto
Infrastructure Consultant
__________________________________________
![Picture (Metafile)]()
LogicaCMG Nederland B.V. (BU SD/AT)
Division Industry,
Distribution and Transport (ID&T)
Kennedyplein
248, 5611 ZT, Eindhoven
.
Postbus
7089
5605 JB Eindhoven
(
Tel
: +31-(0)40-29.57.777
2
Fax
: +31-(0)40-29.57.709
(
Mobile : +31-(0)6-26.26.62.80
*
E-mail :
[EMAIL PROTECTED]
"
<http://www.logicacmg.com/> - Solutions that matter -
This e-mail and any attachment is for
authorised use by the intended recipient(s) only. It may contain proprietary
material, confidential information and/or be subject to legal privilege. It
should not be copied, disclosed to, retained or used by, any other party. If
you are not an intended recipient then please promptly delete this e-mail and
any attachment and all copies and inform the sender. Thank you.
PLEASE READ: The information contained in this email is
confidential and
intended for the named recipient(s) only. If you are not an intended
recipient of this email please notify the sender immediately
and delete your
copy from your system. You must not copy, distribute or take
any further
action in reliance on it. Email is not a secure method of
communication and
Nomura International plc ('NIplc') will not, to the extent
permitted by law,
accept responsibility or liability for (a) the accuracy or
completeness of,
or (b) the presence of any virus, worm or similar malicious
or disabling
code in, this message or any attachment(s) to it. If
verification of this
email is sought then please request a hard copy. Unless
otherwise stated
this email: (1) is not, and should not be treated or relied
upon as,
investment research; (2) contains views or opinions that are
solely those of
the author and do not necessarily represent those of NIplc;
(3) is intended
for informational purposes only and is not a recommendation,
solicitation or
offer to buy or sell securities or related financial
instruments. NIplc
does not provide investment services to private customers.
Authorised and
regulated by the Financial Services Authority. Registered in
England
no. 1550505 VAT No. 447 2492 35. Registered Office: 1 St Martin's-le-Grand,
London, EC1A 4NP. A member of the Nomura
group of companies.
