You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory forest that contains an Active Directory domain. All the servers in the domain run Windows Server 2003 and all client computers run Windows Vista.
The domain contains eight domain controllers. You upgraded one of the domain controllers to Windows Server 2008 called contosoDC1. During the upgrade some of the Active Directory object gets deleted.
You need to recover the deleted objects and plan for a recovery solution that ensures that allow deleted objects to be recovered for up to one year after the date of deletion. Which of the following options would you choose to accomplish the desired task?
A.
On contosoDC1, enable shadow copies of the drive that contains the Ntds.dit file.
B.
Configure daily backups of contosoDC1.
C.
Increase the interval of the garbage collection process for the forest.
D.
Increase the tombstone lifetime for the forest.
E.
None of the above
Explanation:
To recover the deleted objects and plan for a recovery solution that allow deleted objects to be recovered for up to one year after the date of deletion, you need to increase the tombstone lifetime for the forest
If you need to restore your domain controller, or you need to make an authoritative restore of Active Directory, you need a backup which is younger than 60 days (by default). The objects that get deleted from Active Directory will remain as a tombstone.
The Tombstone is the object with limited attributes, such as the GUID, Name and SID of the object, and the mark that it’s deleted. The garbage collection of Active Directory takes care to finally delete tombstones which are older than the tombstone-lifetime.
To avoid inconsistencies in object deletion, the tombstone lifetime is configured to be many times larger than the worst-case replication latency. By default, the Active Directory tombstone lifetime is sixty days. This value can be changed if necessary.