basic question about Actice Directory

Mupfel · Guest

Hi,

i need to know how long a active directory clients needs to be
offline, till it is not more allowed to communicate (authentificate)
with an dc.

is this time period the same between domain controllers too?

Thank you very much for your help

kind regards

Marko Schustek

Paul Bergson [MVP-DS] · Guest

There is no time limit that a client can be offline, if it is offline more
than 30 days, when it comes back on it will modify its password but it will
never expire.

DC's on the other hand need to be able to communicate with other dc's with
in the tombstone life time or records fall off and that update is never
replicated to the off line dc.

By default tombstone life time on Windows Server 2003 is 60 days, this was
increased with SP2 and R2 to 180 days (This must be a new install not an
upgrade). You can increase this tweak.

http://support.microsoft.com/kb/924890

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Mupfel" <ms@nic-systemhaus.com> wrote in message
news:98f2d458-089d-4787-bfac-45b7c83fd2eb@i7g2000prf.googlegroups.com...