Get Tombstone Lifetime via Powershell

Understanding Active Directory Tombstone

A tombstone is process in active directory that define how long deleted object can be restored. Actually when an object is deleted from Active Directory, it is not physically removed from the Active Directory for some days. it’s marked as a tombstone object instead of being fully removed. the Active Directory sets the ‘isDeleted’ attribute of the deleted object to TRUE and move it to a special container called Tombstone, previously known as CN=Deleted Objects.

We cannot access tombstone by windows directory or MMC console. However, tombstones are available to Directory Replication Process, so that the tombstones are replicated to all the domain controllers in the domain.

Get Tombstone Lifetime via Powershell

(get-adobject “cn=Directory Service,cn=Windows NT,cn=Services,cn=Configuration,dc=windowstechno,dc=local” -properties “tombstonelifetime”).tombstonelifetime

PS C:\> (get-adobject "cn=Directory Service,cn=Windows NT,cn=Services,cn=Configuration,dc=windowstechno,dc=local" -prope
rties "tombstonelifetime").tombstonelifetime
180
PS C:\>

Additionally, we have a video below that demonstrates the same. Do not forget to check this.

So, that’s all in this blog. I will meet you soon with next stuff. Have a nice day!!!

Guys please don’t forget to like and share the post. Also join our WindowsTechno Community and where you can post your queries/doubts and our experts will address them.

You can also share the feedback on below windows techno email id.

If you have any questions, feel free to contact us onadmin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.