TopicActive Directory →
Simple definition
An obsolete AD object present on a domain controller while it has been deleted elsewhere.
Technical definition
The fingering objects may appear when a DC does not replicate for too long a period and then returns with outdated data.
What is it used for ?
Understand some inconsistencies in AD replication.
Practical example
An old account may still exist on an isolated DC while it has been removed in the rest of the domain.
Common issues
- Blocked replication
- Ghost objects
- Cleaning done without identifying cause
Related terms
Tombstone Lifetime · Replication
Key takeaway: Exact behavior and commands may vary depending on versions, products and architectures.