Simple definition
The duration of the retention of certain information on an deleted object.
Technical definition
This time is part of the mechanism for replication of deletions and influences the security of re-en-lined former domain controllers.
What is it used for ?
Avoid reappearing deleted objects after a long interruption of replication.
Practical example
A DC remained offline longer than the tombstone lifetime may pose a risk of replication.
Common issues
- Former DC re-established
- Value misunderstood
- Uncontrolled AD restoration
Related terms
Key takeaway: Exact behavior and commands may vary depending on versions, products and architectures.