Deleted Objects Container is a hidden Active Directory system container that receives logically deleted objects during their retention lifecycle.
Simple definition
Deleted Objects Container is a hidden Active Directory system container that receives logically deleted objects during their retention lifecycle. It belongs to the Active Directory vocabulary and is useful when reading architecture diagrams, product documentation, logs, or administration procedures.
What is it used for?
Its main purpose is to retain metadata needed to replicate deletions and, depending on the mode, enable recovery. The practical value depends on the surrounding architecture, security model, and operational requirements.
How does it work?
Deleted objects pass through states related to tombstone lifetime and the Active Directory Recycle Bin. They no longer behave like normal active objects.
Key points
- Scope: A hidden Active Directory system container that receives logically deleted objects during their retention lifecycle.
- Operational goal: Retain metadata needed to replicate deletions and, depending on the mode, enable recovery.
- Implementation: Deleted objects pass through states related to tombstone lifetime and the Active Directory Recycle Bin. They no longer behave like normal active objects.
Points to watch
Do not treat this container as a backup; reliable recovery requires Recycle Bin, system-state backup, and tested procedures.
In short
Deleted Objects Container = a hidden Active Directory system container that receives logically deleted objects during their retention lifecycle. Use it when you need to retain metadata needed to replicate deletions and, depending on the mode, enable recovery.