Q. How do I enable the Active Directory (AD) Recycle Bin?

A. Once you've raised the forest level to Windows Server 2008 R2, you need to use the Enable-ADOptionalFeature cmdlet to enable the Recycle Bin for the forest. Remember, once you enable this you can't disable, so be sure you really want this functionality.

The format of the command is shown here:

Enable-ADOptionalFeature -Identity 'CN=Recycle Bin Feature,CN=Optional
Features,CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,&
lt;your forest name, DC=domain, DC=net/com>' -Scope
ForestOrConfigurationSet -Target '<DNS name of forest>'

You can check if the Recycle Bin is enabled by viewing the AD Option features:

PS C:\> Get-ADOptionalFeature -filter {name -like "*"}

DistinguishedName : CN=Recycle Bin Feature,CN=Optional
Features,CN=Directory Service,CN=Windows
NT,CN=Services,CN=Configuration,DC=savilltech,
DC=net
EnabledScopes : {}
FeatureGUID : 766ddcd8-acd0-445e-f3b9-a7f9b6744f2a
FeatureScope : {ForestOrConfigurationSet}
IsDisableable : False
Name : Recycle Bin Feature
ObjectClass : msDS-OptionalFeature
ObjectGUID : 3a54f214-699d-4231-a836-3d34a7720d40
RequiredDomainMode :
RequiredForestMode : Windows2008R2Forest

You can see in the above output there are no enabled scopes for the Recycle Bin, so the Recycle Bin isn't enabled. I now enable the feature:

PS C:\> Enable-ADOptionalFeature -Identity
'CN=Recycle Bin Feature,CN=Optional Features,CN=Directory
Service,CN=Windows NT,CN=Services,CN=Configuration,
DC=savilltech,DC=net' -Scope ForestOrConfigurationSet
-Target 'savilltech.net'
WARNING: Enabling 'Recycle Bin Feature' on
'CN=Partitions,CN=Configuration,DC=savilltech,DC=net'
is an irreversible action! You will not be able to
disable 'Recycle Bin Feature' on 'CN=Partitions,
CN=Configuration,DC=savilltech,DC=net' if you proceed.

Confirm
Are you sure you want to perform this action?
Performing operation "Enable" on Target "Recycle Bin Feature".
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help
(default is "Y"):y

The recycle bin is now enabled. I can check this by checking the AD option features again and seeing that the Recycle Bin now has enabled scopes.

PS C:\> Get-ADOptionalFeature -filter {name -like "*"}

DistinguishedName : CN=Recycle Bin Feature,CN=Optional
Features,CN=Directory Service,CN=Windows NT,CN=Services,
CN=Configuration,DC=savilltech,DC=net EnabledScopes :
{CN=NTDS Settings,CN=SAVDALDC01,CN=Servers,CN=Dallas,
CN=Sites,CN=Configuration,DC=savilltech,DC=net,
CN=Partitions,CN=Configuration,DC=savilltech,DC=net}
FeatureGUID : 766ddcd8-acd0-445e-f3b9-a7f9b6744f2a
FeatureScope : {ForestOrConfigurationSet}
IsDisableable : False
Name : Recycle Bin Feature
ObjectClass : msDS-OptionalFeature
ObjectGUID : 3a54f214-699d-4231-a836-3d34a7720d40
RequiredDomainMode :
RequiredForestMode : Windows2008R2Forest

• Q: How can I delegate the right to unlock locked Active Directory (AD) user accounts?
• Q. Can I have Windows NT 4 BDC's in my Windows 2008 and Server 2008 R2 Active Directory domains?
• Active Directory Growth Tracker: A Script to Count Objects
• Q. How do I create the Systems Management container in Active Directory (AD)?