Hi Guido,
 
There is no secret behind the wall :o)
 
This is the full story.
 
I have Active Directory Connectors that permit bidirectionnal replication of 
all 5.5 mailboxes <-> Active Directory Forest.
The pb is that i had an issue where a user object had the ADC-Global-names 
mapped with multiple users DN and that is something wrong with the system. The 
fact is when the user (with multiple ADC-Global-names) has been deleted from 
AD, the deletion (from the tombstoned container) effects all the exchange 
mailboxes that correspond to the ADC-Global-names populated in that user !!!! 
So 5 milboxes were deleted. So i disable the deletion from Windows -> Exchange 
to occur. And i wondered if there was a way to delete *ONLY* the user in 
question.
 
Just to remind, the tombstoned container in AD is also replicated via the 
connection agreement.
 
Thanks,
 
Yann

________________________________

De: [EMAIL PROTECTED] de la part de Grillenmeier, Guido
Date: mar. 23/05/2006 16:34
À: [email protected]
Objet : RE: [ActiveDir] Delete only one object in the Tombstone.


hmm - what would be the reason why you'd want to purge a single deleted object 
(tombstone) from your AD?  What secret information does the tombstone contain, 
that you don't wish remains in it?  Realize that there are hardly any 
attributes that remain in the tombstone by default, unless you've changed the 
searchflags of your attributes to include more.
 
E.g. by default, only the following attributes are kept in a user account's 
tombstone from the searchflags are:
Instance-Type
Legacy-Exchange-DN
NT-Security-Descriptor
Object-Class
Object-Guid
Object-Sid
Repl-Property-Meta-Data
SAM-Account-Name
System-Flags
uid
User-Account-Control
USN-Changed
USN-Created

Note that a few other attributes are hardcoded in AD to remain in the 
tombstone. If these really contain anything critical you'd want to get rid of 
(maybe in the name attribute etc.), you'd have the option to reanimate the 
tombstone (undelete) and then edit it appropriately, and delete it again :-). 
I'm actually unsure if the system allows you to edit the object in the deleted 
items container directly - might be worth a try.
 
/Guido

________________________________

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. 
Simon-Weidner
Sent: Montag, 22. Mai 2006 14:34
To: [email protected]
Subject: RE: [ActiveDir] Delete only one object in the Tombstone.


Hello Tiroa,
 
it is not possible to purge Tombstones, no matter if one or all. For all you'd 
be able to modify tombstone lifetime and the system time, however I strongly 
doubt this would be supported by MS (tombstone-lifetime is supported, modifying 
systemtime to enforce garbage collection of tombstones most likely not).

Gruesse - Sincerely, 

Ulf B. Simon-Weidner 

  Profile & Publications:   
http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214C811D   
  Weblog: http://msmvps.org/UlfBSimonWeidner
  Website: http://www.windowsserverfaq.org


 


________________________________

        From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of TIROA 
YANN
        Sent: Monday, May 22, 2006 10:59 AM
        To: [email protected]
        Subject: [ActiveDir] Delete only one object in the Tombstone.
        
        
        Hello,
         
        I'd like to know if it is possible to delete *only one* object in the 
tombstone instead of purging all the objects ?
         
        Thanks,
         
        Yann

<<winmail.dat>>

Reply via email to