PROTECTED]
Subject: RE: [ActiveDir] Finding out when an object was deleted
You're the man, Joe. Thanks.
Oh, and Eric - yes, auditing is definitely the first choice, but when the
audit logs are no longer available but you're still inside the tombstone
lifetime.(don
L PROTECTED] On Behalf Of joe
Sent: Thursday, December 09, 2004 12:08 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Finding out when an object was deleted
Well the whenChanged attribute of the tombstone should be the date and
time the object was deleted.
joe
[Thu 12/09/2004 13:06:47.35]
F:
: Thursday, December 09, 2004 12:08 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Finding out when an object was deleted
Well the whenChanged attribute of the tombstone should be the date and
time
the object was deleted.
joe
[Thu 12/09/2004 13:06:47.35]
F:\DEV\cpp\AdFind>adfind -show
Well the whenChanged attribute of the tombstone should be the date and time
the object was deleted.
joe
[Thu 12/09/2004 13:06:47.35]
F:\DEV\cpp\AdFind>adfind -showdel -default -f
"&(objectclass=user)(name=bob*)(isdeleted=TRUE)" whenchanged
AdFind V01.25.00cpp ALPHA Joe Richards ([EMAIL PROTE
