The AD Recycle Bin: Understanding, Implementing, Best Practices, and Troubleshooting

August 27, 2009 by NedPyle [MSFT] // 11 Comments

• 0
• 0

Ned here again. Starting in Windows Server 2008 R2, Active Directory now implements a true recycle bin. No longer will you need an authoritative restore to recover deleted users, groups, OU’s, or other objects. Instead, it is now possible to use PowerShell commands to bring back objects with all their attributes, backlinks, group memberships, and metadata. AD Recycle Bin (ADRB) was a long time coming and it definitely has its idiosyncrasies, but I think you are going to love it.

Today I am going to talk about a few aspects of this new system:

• Understanding how ADRB works under the covers.
• What the requirements are and how to turn ADRB on.
• Using ADRB, along with some best practices.
• Troubleshooting common issues people run into with ADRB.

Armed with this information, you should be able to speak with authority on the AD Recycle Bin and perhaps, save your company from a disaster someday.

Let’s get cranking, IT super hero.

How to Enable Active Directory Recycle Bin (Server 2016)

By Robert Allen | April 7, 2018 | 3 

In this tutorial, you will learn how to enable the Active Directory Recycle bin on Windows Server 2016.

I’ll show you how to enable it through the GUI as well as with Powershell.

The AD recycle bin comes in handy when you accidentally delete an AD object and need to restore it.

Considering updating your Domain functional level from Windows 2003? Read this!

The Exchange TeamFebruary 13, 20158

• 0
• 0

---

Now that Windows Server 2003 end of life (July 14th, 2015) is on the horizon, many customers are updating their Active Directory (AD) Domain Controllers (DC) from 2003. The first item to consider is which Windows Server Operating System (OS) you will be moving to for your DC’s. There are several options to consider today: 2008, 2008R2, 2012, or 2012R2 operating systems. However, no matter which newer OS you move your DC’s to, coming from 2003, the krbtgt account will reset its’ password when you update the Domain Functional Level (DFL), which is the concern that could break Exchange.

Шпаргалка по назначению прав на файлы

cmd:
icacls "\\path\file" /grant user:(OI)(CI)(M) - Добавить права на изменения с наследованием

powershell:
start-process "$env:windir\system32\icacls.exe" -arg '"\\path\file" /grant user:(OI)(CI)(M)' -nonew - Добавить права на изменения с наследованием

bash:

Проблемы со связью через Asterisk

Если проблема заключается в "электронном голосе", либо не все слова прилетают в трубку, то проверить что канал (между звонящими, между телефонами и АТС asterisk) имеет постоянную задержку.

Отключение автозапуска (autorun) на съёмных носителях

Автозапуск (autorun) отключается простым скриптом.

@echo off
echo Disable Autorun on all removable devices
set RegistryFolder="HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer"
reg add %RegistryFolder% /v NoDriveTypeAutoRun /t REG_DWORD /d 0x000000ff /f
reg add %RegistryFolder% /v NoDriveAutoRun /t REG_DWORD /d 0x000000ff /f
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf" /ve /t REG_SZ /d "SYS:AutorunDisabledBy_AnikinSV" /f

Вернуть язык в терминале >= Windows Server 2012 R2

@echo off

powershell.exe -Command "& {$a=Get-WinUserLanguageList; $a.Add('ru-RU'); $a.Add('en-US'); Set-WinUserLanguageList $a -Force}"