Use dsquery to determine the tombstone lifetime for an AD forest

This post will show how to use the dsquery command to determine the tombstone lifetime of a forest. Open a command prompt. Do this by typing cmd in the start menu search box. Hit enter. The command prompt opens and you type the following: dsquery * “cn=directory service,cn=windows nt,cn=services,cn=configuration,dc=<forestDN>” –scope … Continue reading

Print Friendly

TombstoneLifetime attribute not set in Active Directory

ADSI edit directory services properties Tombstone Lifetime attribute

At a clients Windows 2008 server i wanted to see how long my install from media (IFM) backups would last. Install from media backups are only useable if the TombstoneLifetime setting not has been passed. This setting tells Active Directory (AD) how long to keep a deleted item in some … Continue reading

Print Friendly

Ports required to join a windows server domain

I had a challenge getting a firewall rule to work. A colleague had put an ANY ANY rule in place so our Windows 2008 servers could join the domain. Not cool! So we decided to block traffic, except for a few ports that are required for joining a windows domain. … Continue reading

Print Friendly