The path of the object in the Contoso.com domain would resemble the following:
When an object is deleted, it is not removed from the Active Directory database. Instead, the object is instead marked for deletion at a later date. This mark is then replicated to other domain controllers. Therefore, the garbage collection process starts by removing the remains of previously deleted objects from the database. These objects are known as tombstones. Next, the garbage collection process deletes unnecessary log files. Finally, the process starts a defragmentation thread to claim additional free space.
In addition, there are two methods to defragment the Active Directory database in Windows 2000 and in Windows Server 2003. One method is an online defragmentation operation that runs as part of the garbage collection process. The advantage of this method is that the server does not have to be taken offline for the operation to run. However, this method does not reduce the size of the Active Directory database file (Ntds.dit). The other method takes the server offline and defragments the database by using the Ntdsutil.exe utility. This approach requires that the database to start in repair mode. The advantage of this method is that the database is resized and unused space is removed. Therefore, and the size of the Ntds.dit file is reduced. To use this method, the domain controller must be taken offline.
Limits for garbageCollPeriod:
The minimum value is 1, and the maximum is 168 for one week. The default for the value is 12 hours.
Minimum for Tombstone Lifetime:
The minimum for Tombstone Lifetime is 2 days for the purposes of the KCC stay of execution calculation.
The AD database layer enforces an additional metric. TSL days must not be smaller than three times the garbage collector interval. Based on the Default of 12 hours, TSL is a minimum of 2 days. If GC interval is 20 hours, the TSL minimum is 3 days (must be bigger than 60 hours). If the GC interval is 25 hours, you get beyond three days (with 75 hours) and the TSL minimum is 4 days.
The catch with the checks both DB layer and KCC perform is that if TSL is lower than the allowed minimum, it does not revert to the minimum value of 2 or more days, but to the default of 60 or 180 days.
IMPORTANT: In case TSL is corrected to the default because of a mismatch, the value for the garbage collection interval is also set to the default of 12 hours.
Changes to tombstone lifetime in Windows Server 2003 Service Pack 1The default tombstone lifetime (TSL) in Windows Server 2003 has proven to be too short. For example, a prestaged domain controller may be in transit for longer than 60 days. An administrator may not resolve a replication failure or bring an offline domain controller into operation until the TSL is exceeded. Windows Server 2003 Service Pack 1 (SP1) increases the TSL from 60 to 180 days in the following scenarios:
- A Windows NT 4.0 domain controller is upgraded to Windows Server 2003 by using Windows Server 2003 SP1 installation media to create a new forest.
- A Windows Server 2003 SP1 computer creates a new forest.
- A Windows 2000 domain is upgraded to Windows Server 2003 by using installation media for Windows Server 2003 with SP1.
- Windows Server 2003 SP1 is installed on a domain controller that is running the original release version of Windows Server 2003.
- Backups that are used in data recovery scenarios have a longer useful life.
- System state backups that are used for installation from media promotions have a longer useful life.
- Domain controllers can be offline longer. Prestaged computers approach TSL expiration less frequently.
- A domain controller can successfully return to the domain after a longer time offline.
- Knowledge of deleted objects is retained longer on the originating domain controller.
Article ID: 198793 - Last Review: Jan 7, 2017 - Revision: 1