BLOG ³¡¸¨®æ

Windows Server 2012 - Configuring Active Directory Recycle Bin

Active Directory Recycle Bin feature is a Long-Awaited to recover accidentally deleted Active Directory objects without restoring Active Directory data from backups, restarting Active Directory Domain Service (AD DS), or rebooting domain controller from Microsoft, which was introduced in Windows Server 2008 R2. Active Directory objects are preserved in the recycle bin for an amount of time to match the tombstone lifetime of the forest. This is 180 days by default. But in practice it is less impressive because to enable this feature we have to use Windows PowerShell and the Ldp.exe LDAP utility, which is not common for all levels of Windows Administrators. Apart from this, it requires the forest level be at least Windows Server 2008 R2. Once we enable Active Directory Recycle Bin feature, we will not be able to disable it.

In Windows Server 2012, Microsoft updates some improvement in Active Directory Recycle Bin such as it is no longer required to use Windows PowerShell or Ldp.exe to enable the Active Directory Recycle Bin. It can simply access from Active Directory Administrative Center. Even these improvements, organizations will not still acceptable to enable this feature because once we enable Active Directory Recycle Bin feature; we will not be able to disable it on Windows Server 2012. I hope Microsoft will fix this issue in the near future.

To Enable the Active Directory Recycle Bin:

1. Open Server Manager, on the Tools menu, click Active Directory Administrative Center.

2. In the navigation pane, click msserverpro(local). In the Tasks pane on right side, click Enable Recycle Bin.

3. In the Enable Recycle Bin Confirmation dialog box, click OK.

4. In the Active Directory Administrative Center dialog box, click OK.

5. On the menu bar, click the Refresh icon. Note that a Deleted Object container now appears.

 Delete User Objects:

1. Open Active Directory Users and Computers, select the required OU ( HR Department), select all users under HR Dept. OU, and click Delete. In the Delete Confirmation dialog box, click Yes.

Restore Deleted Objects:

1. Open Active Directory Administrative Center.

2. In the navigation pane, select  msserverpro(local), then In the center pane, double-click on Deleted Objects.

3. In the navigation pane under Deleted Objects, Press Ctrl  Key and select all Deleted Users. In the Tasks pane on right side, click Restore to restore the object to its original location.
 

5. In the navigation pane, under msserverpro(local), select HR Department OU and make sure that all deleted objects are restored or we can go to Active Directory Users and Computers to make sure that all deleted objects are restored.

 

 

Relate Post : Windows Server - Tuning replication performance in DFSR Windows Server - Create Trusted Remote Desktop Services (RDP) SSL Certificate Windows 2012 - Direct Access Windows Server - Seizing An Operations Master with NTDSUTIL Windows Server 2012 - DNS Backup and Recovery Windows 2012 - DC server not sync (SYSVOL & NETLOGON) Windows Server 2012 - Set Up your First (root) Domain Controller Windows Server - Configuring DFSR to a Static Port configured RD Session Host server with TS license server Windows Server - Active Directory Domain Controller Replication Error
Comments :
No Comments

Post your comment:

Post your comment by Guest :

Verify Code :