I have a need to find a username that was deleted from the AD using only the SID. I understand that Windows AD leaves being a Tombstone file that might contain this information. Can someone give me the syntax of a command or post a document that might point me in the right direction?
Viewing deleted objects in Active Directory - http://support.microsoft.com/kb/258310
Unless the user has been deleted for longer than the tombstone lifetime of your AD, it will be in there.
Edit: And here's a better article, with pictures! - http://www.petri.co.il/deleted-objects-in-active-directory.htm
I also googled around and indeed, do as mentioned on the site http://www.petri.co.il/deleted-objects-in-active-directory.htm.
Only, in the search box you choose as filter