Recycle Bin
The Active Directory Recycle Bin allows for the recovery of Active Directory objects without requiring a full Active Directory restoration. It’s recommended by Microsoft that the Recycle Bin be enabled on all domains that support the feature.
⚠️
Enabling this feature is permanent. Once enabled, it cannot be disabled.
- Open Active Directory Administrative Center.
- Within the left-hand column select your domain. For
ad.twobyte.blog
, it would bead
. - On right-hand column, select Enable Recycle Bin.
Optionally, you can enable the Recycle Bin via PowerShell. Run the following command on one of your DCs. The change will be replicated to all DCs within your domain.
Enable-ADOptionalFeature 'Recycle Bin Feature' -Scope ForestOrConfigurationSet -Target ad.twobyte.blog
Restore Deleted Objects
To restore an object, run the following commands:
# Restore deleted object to original location.
Get-ADObject -Filter {displayName -eq "Jane Smith"} -IncludeDeletedObjects | Restore-ADObject