To learn more about the Active Directory Recycle Bin, see this FAQ.
A. Once you've raised the forest level to Windows Server 2008 R2, you need to use the Enable-ADOptionalFeature cmdlet to enable the Recycle Bin for the forest. Remember, once you enable this you can't disable, so be sure you really want this functionality.
The format of the command is shown here:
Enable-ADOptionalFeature -Identity 'CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,& lt;your forest name, DC=domain, DC=net/com>' -Scope ForestOrConfigurationSet -Target ''
You can check if the Recycle Bin is enabled by viewing the AD Option features:
PS C:\> Get-ADOptionalFeature -filter \{name -like "*"\}
DistinguishedName : CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,DC=savilltech, DC=net EnabledScopes : \{\} FeatureGUID : 766ddcd8-acd0-445e-f3b9-a7f9b6744f2a FeatureScope : \{ForestOrConfigurationSet\} IsDisableable : False Name : Recycle Bin Feature ObjectClass : msDS-OptionalFeature ObjectGUID : 3a54f214-699d-4231-a836-3d34a7720d40 RequiredDomainMode : RequiredForestMode : Windows2008R2Forest
You can see in the above output there are no enabled scopes for the Recycle Bin, so the Recycle Bin isn't enabled. I now enable the feature:
PS C:\> Enable-ADOptionalFeature -Identity 'CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration, DC=savilltech,DC=net' -Scope ForestOrConfigurationSet -Target 'savilltech.net' WARNING: Enabling 'Recycle Bin Feature' on 'CN=Partitions,CN=Configuration,DC=savilltech,DC=net' is an irreversible action! You will not be able to disable 'Recycle Bin Feature' on 'CN=Partitions, CN=Configuration,DC=savilltech,DC=net' if you proceed. Confirm Are you sure you want to perform this action? Performing operation "Enable" on Target "Recycle Bin Feature". \[Y\] Yes \[A\] Yes to All \[N\] No \[L\] No to All \[S\] Suspend \[?\] Help (default is "Y"):y
The recycle bin is now enabled. I can check this by checking the AD option features again and seeing that the Recycle Bin now has enabled scopes.
PS C:\> Get-ADOptionalFeature -filter \{name -like "*"\} DistinguishedName : CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services, CN=Configuration,DC=savilltech,DC=net EnabledScopes : \{CN=NTDS Settings,CN=SAVDALDC01,CN=Servers,CN=Dallas, CN=Sites,CN=Configuration,DC=savilltech,DC=net, CN=Partitions,CN=Configuration,DC=savilltech,DC=net\} FeatureGUID : 766ddcd8-acd0-445e-f3b9-a7f9b6744f2a FeatureScope : \{ForestOrConfigurationSet\} IsDisableable : False Name : Recycle Bin Feature ObjectClass : msDS-OptionalFeature ObjectGUID : 3a54f214-699d-4231-a836-3d34a7720d40 RequiredDomainMode : RequiredForestMode : Windows2008R2ForestRelated Reading:
- Q: How can I delegate the right to unlock locked Active Directory (AD) user accounts?
- Q. Can I have Windows NT 4 BDC's in my Windows 2008 and Server 2008 R2 Active Directory domains?
- Active Directory Growth Tracker: A Script to Count Objects
- Q. How do I create the Systems Management container in Active Directory (AD)?
Check out hundreds more useful Q&As like this in John Savill's FAQ for Windows. Also, watch instructional videos made by John at ITTV.net.