Active Directory Tombstone

  • Thread starter Thread starter Hanifah
  • Start date Start date
H

Hanifah

Hi

Have few questions here :

1) In order for us to plan a practical backup plan, is
there a way for the AD tombstone (default = 60 days)
lifetime be extended?

2) Is there a way system state can be backed up without
using Administrator credential? ( Bckp oprtr couldn't
perform the system state backup)

Thanks ;)

Regards
Hanifah
 
1. yes you can actually bump up the value for the TombStone. Im keen on how
you are looking at this value for making a backup plan?

This KB tells you how - Backup of the Active Directory Has 60-Day Useful
Life
http://support.microsoft.com/defaul...port/kb/articles/Q216/9/93.ASP&NoWebContent=1

You would need to consider a bunch of things before you actually change this
value. The NTDS.DIT file is bloat a whole lot more depending on how much you
bump up the value by.


2,. Im not a 100% sure of this, but accounts who are memebers of the builtin
group BackupOperators can take a systemstate backup just fine. Look at this
userrights assignments. he should hold the necessary security rights
 
Back
Top