Share via

2.2.7 LDAP Show Deleted Control

  • Article

The presence of this LDAP control, with OID 1.2.840.113556.1.4.417, in an LDAP Search request instructs AD DS to specify that tombstones and deleted objects are to be visible to the client.

This extension is defined for AD DS in the Active Directory Technical Specification [MS-ADTS] section 3.1.1.3.4.1.14 ("LDAP_SERVER_SHOW_DELETED_OID").