A. The Get-ADObject PowerShell cmdlet can be used to view deleted objects if the -IncludeDeletedObjects switch is passed.
Alternatively, for more general browsing, you can use the Ldp tool. To view deleted objects, you have to enable the "Return deleted objects" control, which is available via the Options - Controls menu.
Click to expand. |
Once this setting is enabled, you can browse the tree by connecting, binding, and then viewing the tree with the base distinguished name of the domain. As shown here, I can see a deleted object in my domain that has isDeleted set to TRUE. Also note that the users distinguished name has been modified.
Click to expand. |
Youcan actually take this a step further and enable the return of recycled objects in the Ldp controls. Doing this will show the recycled objects, as shown here. In this case, you also have an isRecycled attribute set to true and fewer attributes.
Click to expand. |
- Q: How can I delegate the right to unlock locked Active Directory (AD) user accounts?
- Q. Can I have Windows NT 4 BDC's in my Windows 2008 and Server 2008 R2 Active Directory domains?
- Active Directory Growth Tracker: A Script to Count Objects
- Q. How do I create the Systems Management container in Active Directory (AD)?
Check out hundreds more useful Q&As like this in John Savill's FAQ for Windows. Also, watch instructional videos made by John at ITTV.net.