Is there a way to find out exactly when an object was deleted based on
its tombstone ? For example, if a user object was deleted can I find
it's tombstone somehow and retrieve a timestamp of when it was deleted ?
List info : http://www.activedir.org/mail_list.htm
List FAQ:
, December 09, 2004 12:37 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Finding out when an object was deleted
Is there a way to find out exactly when an object was deleted based on its
tombstone ? For example, if a user object was deleted can I find it's
tombstone somehow and retrieve a timestamp of when
: Thursday, December 09, 2004 12:08 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Finding out when an object was deleted
Well the whenChanged attribute of the tombstone should be the date and
time
the object was deleted.
joe
[Thu 12/09/2004 13:06:47.35]
F:\DEV\cpp\AdFindadfind -showdel
] On Behalf Of joe
Sent: Thursday, December 09, 2004 12:08 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Finding out when an object was deleted
Well the whenChanged attribute of the tombstone should be the date and
time the object was deleted.
joe
[Thu 12/09/2004 13:06:47.35]
F:\DEV\cpp
PROTECTED]
Subject: RE: [ActiveDir] Finding out when an object was deleted
You're the man, Joe. Thanks.
Oh, and Eric - yes, auditing is definitely the first choice, but when the
audit logs are no longer available but you're still inside the tombstone
lifetime.(don't ask!)
Dave
