id="info"

Data Centers

Active Directory Recycle Bin can save a Windows Server admin's day

Windows Server 2008's upcoming R2 release has a Recycle Bin for protecting Active Directory objects. IT pro Rick Vanover tells you how to enable this feature.

When Windows Server 2008 R2 becomes available, the Active Directory Recycle Bin feature may make many administrators' lives easier. The base release of Windows Server 2008 comes with a nice safeguard for organizational unit deletion, and now with R2, there is additional protection functionality.

The Recycle Bin feature allows objects to be restored via the Active Directory PowerShell environment. For the beta release, this functionality is turned off by default, so the first step is to enable the feature. Figure A shows this step. Figure A

Figure A

Click the image to enlarge.

Once this is complete, you can view the contents of the Active Directory Recycle Bin. This special location exists as a container that holds the objects as they are deleted.

In my first looks at Windows Server 2008 R2 beta, I set up a test domain running at that function level. The domain, dev.tld, had nothing in the Recycle Bin after it was created. I deleted two objects: one user and one group. Figure B shows the query of what is in the Recycle Bin before the two objects were deleted, then another query after they were deleted. Figure B

Figure B

Click the image to enlarge.

Notice that some fields were cut off in the display, notably the full GUID (which is needed for the restore). To display the entire GUID and object name, you would run this query:

Get-ADObject -SearchBase "CN=Deleted Objects,DC=dev,DC=tld" -ldapFilter "(objectClass=*)" -includeDeletedObjects | FT ObjectGUID,Name  -A

Then, the full GUID is displayed, so a copy and paste operation will allow an easy restore. From the list above, to restore the single user named test, the following command will perform the restore:

Restore-ADObject -Identity 6ff46162-15c2-4d42-8e15-2fcac5c8422e

The object is instantly returned to full existence in Active Directory.

This will be a very desired feature for the Windows Server administrator, so be sure to get a look to the R2 beta. The Windows Server 2008 R2 Reviewers Guide has more information on the Recycle Bin feature and the other features of R2.

Stay on top of the latest Windows Server 2003 and Windows Server 2008 tips and tricks with our free Windows Server newsletter, delivered each Wednesday. Automatically sign up today!

About

Rick Vanover is a software strategy specialist for Veeam Software, based in Columbus, Ohio. Rick has years of IT experience and focuses on virtualization, Windows-based server administration, and system hardware.

Editor's Picks