How to Recover an Active Directory object using the Recycle Bin , 2008 & 2012 Methods

Advertisement



image

At some point in your career as an Active Directory Domain Administrator you will have the need to recover an AD object (user,computer,OU etc) and the last thing you want to do is an authoritive restore from backup.

In a previous post I show you how to check if the AD Recycle Bin feature is enabled and how to enable it which is the main prerequisite for this post.

In Windows Server 2012:



In Server 2012 it really easy using the Active Directory Administrative Center aka ADAC

  1. Open the the ADAC

    image

  2. Select Deleted Objects



    image

  3. Right click an object on the right and select Restore or Restore To… then select the location the object should be restored to.

    image

In Windows Server 2008:



There are 3 ways if you’re in a Windows 2008 environment.

  1. Use the ADAC tools installed on a Windows 2012 Server. This will have the same result and procedure as shown above and is by far the easiest.
  2. Option 2 is using LPD.exe ,Microsoft has an easy to follow article detailing this procedure.
  3. Using PowerShell.
    • use the Get-ADObject command if you want a list of deleted objects
    • once found you can simply restore the object using Restore-ADObject (See Example below of a computer object being restored. Same applies to users and other AD objects )

      image


That's It!

I hope this post has been informative for you. Send a shout out if you found this post helpful or comment if you have any questions.

Enjoyed this? Get more like it.

Scripts, walkthroughs, and real-world fixes — delivered to your inbox twice a month. No spam, ever.

Advertisement

Comments