What Is a Tombstone?
When Active Directory deletes an object from the directory, it does not physically remove the object from the database.
27.5.09
Where password is stored ?
windows does not store local account password, but it does store a hash value, also know as digital "fingerprint" 128 bit, of thepassword