How to check whether AD recycle bin is enabled on AD 2008R, 2012, 2012R2 or AD 2016

Use below power shell command to check whether AD recycle bin is enabled or not.


Open Active Directory power shell module from Admin tools or Server manager.
 Get-ADOptionalFeature -Filter 'name -like "Recycle bin feature"'

 If “Enabled Scope” is empty then AD recycle bin is not enabled.

Run below power shell command to enable it.
Enable-ADOptionalFeature –identity ‘CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,dc=test,dc=com’ –scope ForestConfigurationSet –Target test.com




Replace test.com with your corresponding domain name




Comments

Post a Comment

Popular posts from this blog

The System could not log you on. The revocation status of the smart card certificate used for authentication could not be determined

Image
OS: Windows 7, Windows 10 Server OS: Windows 2003, 2008, 2008 R2, 2012, 2012 R2 and Windows Server 2016 Condition: Error message when we use smart to log in on a domain computer. Cause:  This happens when Certificate Authority (CA) service stopped and CA is unable to publish the CRL (certificate revocation list) and revocation list is expired. Solution : Log in to CA server using CA admin user. Click Start à Run à Services.msc and press Enter to open services console. Check “Active Directory Certificate services”, if the service is stopped, then Right Click à Click on Start. Wait for some time, CA should publish the new CRL. If you want to force the CRL publication then follow below steps. Click Start à Run à Control and Press Enter to open Control Panel. Double Click Administrative tools à Double Click on Certificate Authority. Right Click on Revoked Certificates à All Tasks à Publish Now ask user to restart their client machines so that client machines can recei...
Read more

The System could not log you on. The revocation status of the smart card certificate used for authentication could not be determined

Image
OS: Windows 7, Windows 10 Server OS: Windows 2003, 2008, 2008 R2, 2012, 2012 R2 and Windows Server 2016 Condition: Error message when we use smart to log in on a domain computer. Cause:  This happens when Certificate Authority (CA) service stopped and CA is unable to publish the CRL (certificate revocation list) and revocation list is expired. Solution : Log in to CA server using CA admin user. Click Start à Run à Services.msc and press Enter to open services console. Check “Active Directory Certificate services”, if the service is stopped, then Right Click à Click on Start. Wait for some time, CA should publish the new CRL. If you want to force the CRL publication then follow below steps. Click Start à Run à Control and Press Enter to open Control Panel. Double Click Administrative tools à Double Click on Certificate Authority. Right Click on Revoked Certificates à All Tasks à Publish Now ask the user to restart their cl...
Read more

Unblock gemalto .net smart cards using Gemalto response calculator

Image
Gemalto has provided a utility to calculate the response using Gemalto response calculator so that blocked .net smart cards can be unblocked. First, download and install Gemalto Mini Drive from Gemalto website. Now, push below group policy on all domain client machines so that users can get challenge when their smart cards are blocked. Open Group Policy Management Console à Computer Configuration à Administrative Templates à Windows Components à Smart Card à Enabled “Allow Integrated Unblock screen to be displayed at the time of Logon”. After applying the Group policy, whenever user smart card gets blocked, they will receive a screen which will show them a challenge. Open Gemalto Response Calculator using below steps. Click on Start Menu à All Programs à Gemalto à Response Calculator; you will get below application opened. Enter the Challenge and Click on Calculate Response. Below is an example image. It will generate a response. Ask the user to enter the response in response ...
Read more