Question

Recovery of Active Recovery with Windows Server 2012

Answer 1

Active Directory Recycle Bin Â
The recycle bin allows us to restore Active Directory objects that we have deleted without having to restart the domain controllers in DSRM mode (Directory Services Restore Mode) in this way we avoid complexity in this way and do not depend exclusively on the line console of commands to make a recovery of deleted objects.

To enable the recycle bin we have a graphical interface which makes it a much more direct and less complex task, the advantage of the recycle bin is that the linkable and non-linkable attributes are stored in the object, which means that the attributes such as group memberships and permissions that the object had before being erased are maintained.

It is important to mention that once the recycling bin is enabled it can not be disabled since it is done at the forest level.

To enable it, we must do the following.

• - Primero debemos asegurarnos que el nivel funcional del bosque esta dispuesto para Windows Server 2008 R2 o Windows Server 2012. 1 - First we must make sure that the functional level of the forest is ready for Windows Server 2008 R2 or Windows Server 2012.

• - En el centro administrativo de Active Directory , seleccionamos el dominio raíz y hacemos click en habilitar papelera de reciclaje en el panel de tareas, esto nos mostrará el siguiente cuadro de confirmación. 2 - In the administrative center of Active Directory , we select the root domain and click on enable recycle bin in the task panel, this will show us the following confirmation box.

• - Hacemos Click en OK y ya con esto tenemos la Papelera de Reciclaje habilitada para todo el bosque. 3 - We click on OK and with this we have the Recycle Bin enabled for the entire forest.

It is important to point out that only the elements deleted after the trash enable are those that are going to be possible to restore, any previously deleted element will not be able to be restored by this method, to restore a previously deleted object it is necessary to use the mode DSRM .

In its default mode the recycle bin will keep the objects deleted for 180 days, to modify this we must act on the msDS-deletedObjectLifetime attribute using the Set-ADObject cmdlet tool, so we will have something similar to this:

Recovery of elements Â
To recover an item from the recycling bin we must follow the following steps:

• Abrir el centro administrativo de Active Directory 1 - Open the Active Directory administrative center

• - Ir al contenedor de objetos eliminados 2 - Go to the container of deleted objects

• - Seleccionamos el objeto borrado a restaurar, hacemos click en restaurar en el panel de tareas si deseamos restaurarlo a su misma ubicación o restaurarlo en una ubicación diferente de la que se encuentra. 3 - We select the deleted object to be restored, we click on restore in the task panel if we want to restore it to its same location or restore it in a different location than the one it is located.

With the recycle bin it is not possible to restore a deleted child element if the parent of this was previously deleted, to do so we must first restore the parent and then the child element, let's see this with a simple example:

Let's say we want to restore a user account, but we have deleted the Organizational Unit, in order to restore the user account we must first restore the Organizational Unit and then we can restore the user account.

As we could see in the tutorial, the administration and restoration of deleted objects is something quite simple to do in the Windows Server 2012 environment .

---