Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Active Directory Recycle Bin is Not Enabled health check #102

Closed
rebelinux opened this issue Jun 17, 2023 · 1 comment · Fixed by #111
Closed

Add Active Directory Recycle Bin is Not Enabled health check #102

rebelinux opened this issue Jun 17, 2023 · 1 comment · Fixed by #111

Comments

@rebelinux
Copy link
Collaborator

Accidental deletion of Active Directory objects is common for Active Directory Domain Services (AD DS) users. With the Recycle Bin Feature, one could recover accidentally deleted objects in Active Directory.

Enable the AD Recycle Bin for the forest.

On a domain controller in the customer.com parent domain, from an elevated PowerShell prompt, enter the following command as one line:

$RootDomain = (Get-ADForest).Name
$ADForestconfigurationNamingContext = (Get-ADRootDSE).configurationNamingContext
Enable-ADOptionalFeature -Identity "CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services, $ADForestconfigurationNamingContext" -Scope ForestOrConfigurationSet -Target $RootDomain
@rebelinux
Copy link
Collaborator Author

image

rebelinux added a commit to rebelinux/AsBuiltReport.Microsoft.AD that referenced this issue Jun 17, 2023
@rebelinux rebelinux mentioned this issue Jun 23, 2023
7 tasks
@rebelinux rebelinux mentioned this issue Jun 23, 2023
7 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant