Retrieving deleted items from directory

[Nick]

I'm attempting to use ADSI to enumerate deleted items in my (test) directory
(in order to sync with a foreign directory). However first I'm just trying
to get the same results using LDP.EXE.

I seem to be able to locate the Deleted Objects container using the WKGUID
(see results below), but no objects within it are returned even though I
have just deleted an object.

A thought has occurred to me: As this is just a single test DC, with no
other DCs in the forest, is it possible that AD doesn't tombstone the
object, but just removes it immediately? That would account for what I'm
seeing. Otherwise I'm running out of ideas ...

Any help appreciated.

Cheers, Nick.

***Searching...
ldap_search_ext_s(ld,
"<WKGUID=18e2ea80684f11d2b9aa00c04f79f805,dc=london,dc=dev>", 2,
"(objectclass=*)", attrList, 0, svrCtrls, ClntCtrls, 10, 0 ,&msg)
Result <0>: (null)
Matched DNs:
Getting 1 entries:

 

[Robbie Allen]

Hi Nick,

Have you seen this before?
http://msdn.microsoft.com/library/d...n-us/netdir/ad/retrieving_deleted_objects.asp

It walks you through the steps to retrieve deleted objects. With LDP, you
have to enable the Deleted Objects control before doing your search.

Also, AD tombstones objects regardless of how many DCs are in the domain.

Regards,
Robbie Allen
Author of "Active Directory Cookbook" (O'Reilly)
http://www.rallenhome.com/