#Windows Server 2012 #Active Directory #Recycle.bin #ws2012 #ADRecovery Get-ADForest

Some times you deleted a object and want to restore the object from the AD. and yes this can be tricky

You can use ADRestore.NET or but did you know you can enable the recycle.bin for your AD ?

Yes this is possible already in windows 2008r2 but sure in windows server 2012 it is still there an real handy.

First to find out what is the forest level from your AD

In the powershell command:

Get-ADForest my domain name


ah in the forestmode I see windows2008r2forest.

ok I want a 2012 forest and yes I want to upgrade.

Set-ADForestMode –Identity mvp.local -ForestMode Windows2012Forest


Are you sure you want this. In my case YES

I rerun the Get-ADForest mvp.local


Enable Active Directory Recycle Bin feature

get-help Enable-ADOptionalFeature -Examples

————————– EXAMPLE 1 ————————–

    C:\PS>Enable-ADOptionalFeature ‘Recycle Bin Feature’ -Scope ForestOrConfigurationSet -Target ‘mvp.local’ -server mvpdc01

    Enable the optional feature ‘Recycle Bin Feature’ for the forest ‘mvp.local’.  This operation must be performed
    on the Domain Controller that holds the naming master FSMO role.


And Yes I’m sure

Full path to the object :CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,DC=ad,DC=mvp,DC=local


Enable-ADOptionalFeature ‘Recycle Bin Feature’ -scope ForestOrConfigurationSet -target DomainName -server DomainControllerName

Restoring deleted Objects with powershell get full help with the objects.

Get-help Get-ADObject –Example
Get-ADObject -Filter {DisplayName -eq "UserName"} -IncludeDeletedObjects | Restore-ADObject

Get-ADObject -Filter {CN -like "Username"} -IncludeDeletedObjects | Restore-ADObject

Using the Windows Server 2012 graphical tool: Active Directory Administrative Center


Open Active Directory Administrative Center
Right-click the domain icon in the console tree and select Enable Recycle Bin.


Restoring deleted Objects with Active Directory Administrative Center At the domain root of the domain appears Deleted Objects container.

Right-click the selected object and select Restore from the shortcut menu.


Depending on your system environment and business practices, you can increase or decrease the deleted object lifetime and the tombstone lifetime. If you want your deleted objects to be recoverable for longer than the default 180 days, you can increase the deleted object lifetime. If you want your recycled objects to be recoverable (through authoritative restore) for longer than the default 180 days, you can also increase the tombstone lifetime.

The tombstone lifetime is determined by the value of the tombstoneLifetime attribute. The deleted object lifetime is determined by the value of the msDS-deletedObjectLifetime attribute. By default, tombstoneLifetime is set to null. When tombstoneLifetime is set to null, the tombstone lifetime defaults to 60 days (hard-coded in the system). By default, msDS-deletedObjectLifetime is also set to null. When msDS-deletedObjectLifetime is set to null, the deleted object lifetime is set to the value of the tombstone lifetime.

So to find out what the current setting is, go to the properties of the

CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,


Find Deleted object lifetime

Get-ADObject "CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,
DC=mvp,DC=local" –Properties TombstoneLifeTime


Change the default 180 Days. to 365

Set-ADObject -Identity "CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,
DC=mvp,DC=local" –Partition "CN=Configuration,DC=mvp,DC=local" –Replace:@
{"TombstoneLifeTime" = 365}


to get a full list of deleted objects

Get-ADObject -filter ‘isdeleted -eq $true -and name -ne "Deleted Objects"’ -includeDeletedObjects -property *

But Remember If the object is already deleted and then turn-on the recycle.bin will not work !



Author: Robert Smit [MVP]

Robert Smit is Senior Technical Evangelist and is a current Microsoft MVP in Clustering as of 2009. Robert has over 20 years experience in IT with experience in the educational, health-care and finance industries. Robert’s past IT experience in the trenches of IT gives him the knowledge and insight that allows him to communicate effectively with IT professionals who are trying to address real concerns around business continuity, disaster recovery and regulatory compliance issues. Robert holds the following certifications: MCT - Microsoft Certified Trainer, MCTS - Windows Server Virtualization, MCSE, MCSA and MCPS. He is an active participant in the Microsoft newsgroup community and is currently focused on Hyper-V, Failover Clustering, SQL Server, Azure and all things related to Cloud Computing and Infrastructure Optimalization. Follow Robert on Twitter @ClusterMVP Or follow his blog https://robertsmit.wordpress.com Linkedin Profile Http://nl.linkedin.com/in/robertsmit Robert is also capable of transferring his knowledge to others which is a rare feature in the field of IT. He makes a point of not only solving issues but also of giving on the job training of his colleagues. A customer says " Robert has been a big influence on our technical staff and I have to come to know him as a brilliant specialist concerning Microsoft Products. He was Capable with his in-depth knowledge of Microsoft products to troubleshoot problems and develop our infrastructure to a higher level. I would certainly hire him again in the future. " Details of the Recommendation: "I have been coordinating with Robert implementing a very complex system. Although he was primarily a Microsoft infrastructure specialist; he was able to understand and debug .Net based complext Windows applications and websites. His input to improve performance of applications proved very helpful for the success of our project

9 thoughts on “#Windows Server 2012 #Active Directory #Recycle.bin #ws2012 #ADRecovery Get-ADForest”

  1. A small business would rightly prefer not to spend on the OS, while a large or medium scale company
    with heavy traffic and security issues might prefer a
    more secure OS. Moreover there are many good companies which offer free hosting services.
    One thing you need to remember is to look at the way you are
    designing your website, the website acts your representative online either when you are
    logged in to the internet or when you are logged off.

  2. Hey there just wanted to give you a quick heads up.

    The text in your article seem to be running off the screen in
    Safari. I’m not sure if this is a format issue or something
    to do with internet browser compatibility but I figured I’d post to let you
    know. The style and design look great though!
    Hope you get the problem solved soon. Kudos

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: