Root Domain Tombstone Objects
When an Active Directory (AD) user is deleted from AD, the user record is removed from the list of Active Directory objects and then classed as a Tombstone object for a period of time (30 days by default). This time period allows other domain controllers in your network to synchronize their Active Directory databases. Once this time period has elapsed, the object is permanently deleted from the Active Directory database.
Security Warning!Please note that in order to query Active Directory Tombstone objects, it is necessary to use a highly privileged Windows account such as a Domain Administrator account for running the HelpMaster Active Directory service. This is a built-in Windows-based permission requirement when querying Active Directory Tombstone objects.
Scan the tombstone for these Active Directory Domains
Click the Add button to browse to your AD Domains and select the Domains you wish to scan for tombstone objects. Only the root domains will be listed without any OU containers e.g. …wizbangwidgets.com. Any synchronized HelpMaster users that match the tombstone objects in the selected domains will be removed (deleted) from HelpMaster.
Deleted User OU Folders
Another option that is common in Active Directory administration is simply to move the user to an OU designated as a Deleted users container. This method doesn’t actually delete a user from Active Directory - it only moves the user to a location that is understood to hold deleted, or inactive users. The user account is usually marked as disabled in Active Directory. Moving a user account to a holding Delete OU folder allows a user to still exist, albeit in an inactive state, so that they may be re-activated at a later time if necessary.
Scan specific folders that contain “deleted” users
Click the Add button and browse to any OUs designated as delete OUs. Select these to delete any synchronized HelpMaster clients that are in these containers. If no specific delete OUs exist, your system administrator needs to create a new OU container and name it something like Delete HelpMaster Users.
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.