The first thing we’ll need to do is open the ADAC (Active Directory Administrative Center)



Next, we’ll need to navigate to our domain and on the right hand side, click on Enable Recycle Bin (In my case its greyed out because I already enabled it)




We now just have to wait for it to replicate to all the other Domain Controllers in the domain and that’s it.  Now you might be asking yourself, well where do I go to restore the objects? and the answer is you’ll now see a new container called Deleted Objects









Now, let’s say I accidentally deleted a user in AD and now need to get that user object restored, what do I do? One thing I’d like to point out, is that you’ll only see the Deleted Objects container in ADAC, you won’t see in ADUC (Active Directory Users and Computers). I know that most of us use ADUC and not ADAC so you might be curious as to where the folder is located if you do try and restore the object using ADUC, you won’t be able to, you’ll need ADAC for that.

To restore is quite simple, navigate to the Deleted Objects container within ADAC and right click on the object that you want to restore, in this case it’s a test user I created earlier for demonstration purposes and select Restore








This will restore the object to its original location with all the settings intact such as description, membership, SID, attributes, etc. The second option Restore To… Allows us to chose if we want to restore the object to an alternate location. Locate Parent option allows us to locate the OU where this object was originally located.



Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: