Easiest way to enable Active Directory (AD) recycle bin on Windows 2012 R2 or Windows 2016 using Active Directory Administrative Center

 By Default AD recycle bin is disabled on fresh AD 2012 R2 or AD 2016. To enable AD recycle bin using AD Admin Center, please follow below steps.
  1)      Click on Start icon à Run à Control and press Enter to open Control Panel.

  2)Double click on Administrator tools à Double Click on Active Directory Administrative Center.











1       3)      Click on Domain Name (Local) à Under Task à Click on Enable Recycle Bin.


























          4) It will prompt you to confirm that it feature cannot be disabled. Click Ok. 

        5)  You will get a message to fresh AD Admin Center. Click Ok.

     6) Refresh AD Admin Center and check after few minutes, you should get a new container named “Deleted Objects”.


 Once you see the Deleted Container, it means AD recycle bin is enabled.

Comments

Post a Comment

Popular posts from this blog

The System could not log you on. The revocation status of the smart card certificate used for authentication could not be determined

Image
OS: Windows 7, Windows 10 Server OS: Windows 2003, 2008, 2008 R2, 2012, 2012 R2 and Windows Server 2016 Condition: Error message when we use smart to log in on a domain computer. Cause:  This happens when Certificate Authority (CA) service stopped and CA is unable to publish the CRL (certificate revocation list) and revocation list is expired. Solution : Log in to CA server using CA admin user. Click Start à Run à Services.msc and press Enter to open services console. Check “Active Directory Certificate services”, if the service is stopped, then Right Click à Click on Start. Wait for some time, CA should publish the new CRL. If you want to force the CRL publication then follow below steps. Click Start à Run à Control and Press Enter to open Control Panel. Double Click Administrative tools à Double Click on Certificate Authority. Right Click on Revoked Certificates à All Tasks à Publish Now ask user to restart their client machines so that client machines can recei...
Read more

Unblock gemalto .net smart cards using Gemalto response calculator

Image
Gemalto has provided a utility to calculate the response using Gemalto response calculator so that blocked .net smart cards can be unblocked. First, download and install Gemalto Mini Drive from Gemalto website. Now, push below group policy on all domain client machines so that users can get challenge when their smart cards are blocked. Open Group Policy Management Console à Computer Configuration à Administrative Templates à Windows Components à Smart Card à Enabled “Allow Integrated Unblock screen to be displayed at the time of Logon”. After applying the Group policy, whenever user smart card gets blocked, they will receive a screen which will show them a challenge. Open Gemalto Response Calculator using below steps. Click on Start Menu à All Programs à Gemalto à Response Calculator; you will get below application opened. Enter the Challenge and Click on Calculate Response. Below is an example image. It will generate a response. Ask the user to enter the response in response ...
Read more

The System could not log you on. The revocation status of the smart card certificate used for authentication could not be determined

Image
OS: Windows 7, Windows 10 Server OS: Windows 2003, 2008, 2008 R2, 2012, 2012 R2 and Windows Server 2016 Condition: Error message when we use smart to log in on a domain computer. Cause:  This happens when Certificate Authority (CA) service stopped and CA is unable to publish the CRL (certificate revocation list) and revocation list is expired. Solution : Log in to CA server using CA admin user. Click Start à Run à Services.msc and press Enter to open services console. Check “Active Directory Certificate services”, if the service is stopped, then Right Click à Click on Start. Wait for some time, CA should publish the new CRL. If you want to force the CRL publication then follow below steps. Click Start à Run à Control and Press Enter to open Control Panel. Double Click Administrative tools à Double Click on Certificate Authority. Right Click on Revoked Certificates à All Tasks à Publish Now ask the user to restart their cl...
Read more