3.1.1.1.5.1 Tombstone Lifetime and Deleted-Object Lifetime

The tombstone lifetime is controlled by the tombstoneLifetime attribute of the Directory Services object specified in section 6.1.1.2.4.1.1, interpreted as a number of days. If no value is specified for the tombstoneLifetime attribute of the Directory Services object, the tombstone lifetime defaults to 60 days. The minimum value that can be specified is 2 days. If a value of less than 2 days is specified, tombstone lifetime defaults to either 60 days (Windows 2000 Server operating system through Windows Server 2008 operating system), or 2 days (Windows Server 2008 R2 operating system and later).

The deleted-object lifetime is controlled by the msDS-DeletedObjectLifetime attribute of the Directory Services object specified in section 6.1.1.2.4.1.1, interpreted as a number of days. If no value is specified for the msDS-DeletedObjectLifetime attribute of the Directory Services object, deleted-object lifetime defaults to the tombstone lifetime as calculated above. The minimum value that can be specified is 2 days. If a value less than 2 days is specified, deleted-object lifetime defaults to 2 days.