Recovery AD User (Active Directory objects) using Active Directory Power Shell in Windows 2012 R2 or Windows 2016

If you delete the active directory user by mistake and AD recycle bin is enabled then you can use AD active directory administrative center to recover it easily.
Below is an example of the recovery process of a test user account.

Open Active Directory users and computer - Delete test user.


Open Power shell module for Active Directory from Admin tools.
Click – Run – Control and Press Enter to open Control Panel.
Double Click on Administrative tools – Double Click on Power Shell Module for Active Directory.



Type below command to get the deleted user

Get-ADObject -Filter 'samaccountname -eq "test123"' –IncludeDeletedObjects

You can use below command to get the deleted ad user with all properties and then restore it.

Get-ADObject -Filter 'samaccountname -eq "test123"' -IncludeDeletedObjects -Properties *





Run the below command and it will restore the user.

Get-ADObject -Filter 'samaccountname -eq "test123"' -IncludeDeletedObjects -Properties * | Restore-ADObject

Check in AD and make sure deleted user has restored.


Comments

Post a Comment

Popular posts from this blog

The System could not log you on. The revocation status of the smart card certificate used for authentication could not be determined

Image
OS: Windows 7, Windows 10 Server OS: Windows 2003, 2008, 2008 R2, 2012, 2012 R2 and Windows Server 2016 Condition: Error message when we use smart to log in on a domain computer. Cause:  This happens when Certificate Authority (CA) service stopped and CA is unable to publish the CRL (certificate revocation list) and revocation list is expired. Solution : Log in to CA server using CA admin user. Click Start à Run à Services.msc and press Enter to open services console. Check “Active Directory Certificate services”, if the service is stopped, then Right Click à Click on Start. Wait for some time, CA should publish the new CRL. If you want to force the CRL publication then follow below steps. Click Start à Run à Control and Press Enter to open Control Panel. Double Click Administrative tools à Double Click on Certificate Authority. Right Click on Revoked Certificates à All Tasks à Publish Now ask user to restart their client machines so that client machines can recei...
Read more

Unblock gemalto .net smart cards using Gemalto response calculator

Image
Gemalto has provided a utility to calculate the response using Gemalto response calculator so that blocked .net smart cards can be unblocked. First, download and install Gemalto Mini Drive from Gemalto website. Now, push below group policy on all domain client machines so that users can get challenge when their smart cards are blocked. Open Group Policy Management Console à Computer Configuration à Administrative Templates à Windows Components à Smart Card à Enabled “Allow Integrated Unblock screen to be displayed at the time of Logon”. After applying the Group policy, whenever user smart card gets blocked, they will receive a screen which will show them a challenge. Open Gemalto Response Calculator using below steps. Click on Start Menu à All Programs à Gemalto à Response Calculator; you will get below application opened. Enter the Challenge and Click on Calculate Response. Below is an example image. It will generate a response. Ask the user to enter the response in response ...
Read more

The System could not log you on. The revocation status of the smart card certificate used for authentication could not be determined

Image
OS: Windows 7, Windows 10 Server OS: Windows 2003, 2008, 2008 R2, 2012, 2012 R2 and Windows Server 2016 Condition: Error message when we use smart to log in on a domain computer. Cause:  This happens when Certificate Authority (CA) service stopped and CA is unable to publish the CRL (certificate revocation list) and revocation list is expired. Solution : Log in to CA server using CA admin user. Click Start à Run à Services.msc and press Enter to open services console. Check “Active Directory Certificate services”, if the service is stopped, then Right Click à Click on Start. Wait for some time, CA should publish the new CRL. If you want to force the CRL publication then follow below steps. Click Start à Run à Control and Press Enter to open Control Panel. Double Click Administrative tools à Double Click on Certificate Authority. Right Click on Revoked Certificates à All Tasks à Publish Now ask the user to restart their cl...
Read more