Tip: You can get the tombstone lifetime in Active Directory:
1 |
(Get-ADObject -Identity “CN=Directory Service,CN=Windows NT,CN=Services,$((Get-ADRootDSE).configurationNamingContext)” -Properties tombstoneLifetime).tombstoneLifetime |
Note: The tombstone lifetime in a forest determines how long a deleted object exists in AD before it is purged (removed from the directory services).