AD, computer object tombstoning... not happening

Active Directory functional level 2008

I went looking for a computer object today and realized that I have multiple objects that have not been tombstoned but should have been.  One host in question here:
JKFINAJWXP

created: 3/39/2006
modified: 2/7/2013
dsCorePropagationData: 6/1/2015
lastlogon: 12/15/2012
lastLogonTimestamp: 2/7/2013


Am I correct here in thinking this object should have long been tombstoned and deleted?

Our tombstone lifetime is 50 days
LVL 14
Ben HartAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
Hi.

It seems you think that this account should be auto-deleted because it has not been in use for years?
Not using an account does not trigger anything, the tombstone lifetime has no connection to the time an account is not being used.

Did you read the MS documentation on the tombstone lifetime?
0
Ben HartAuthor Commented:
The way I understood it was exactly what I said: A computer object not talking to the domain in X amount of time get's tombstoned.  After the tombstone lifetime value it get's deleted totally.

If that is not the case, then I should be able to run a report to display all tombstoned accounts and trying to find a Powershell cmdlet syntax for that has proven damned near impossible this morning.
0
Ben HartAuthor Commented:
Or.. or maybe not deleted but the object should be hidden from ADUC and the isDeleted attribute set.  Which it is not happening.
0
McKnifeCommented:
AD does not care how long an object is not being used. Only after deletion, the tombstone lifetime counter begins.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ben HartAuthor Commented:
*sigh* Looks as though I have confused stale with tombstoned. Sucks getting old.

Thanks for reminding me Knife.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.