Skip to main content

Enable Recycle Bin

Purpose​

The purpose of this solution is to enable the AD Recycle Bin on Domain Controllers. For more details, refer to the Microsoft TechNet Article.

Note: Once you enable the Active Directory Recycle Bin, you cannot turn it off.

Associated Content​

ContentTypeFunction
Role - AD Domain Recycle Bin FeatureRoleDetects if the Recycle Bin feature is enabled on the Infrastructure Master
AD Recycle Bin State CheckRemote MonitorA remote PowerShell monitor that detects whether the AD Recycle Bin is enabled or disabled on the Windows Infrastructure Master
AD - Enable AD Recycle BinScriptThis script enables the AD Recycle Bin
△ Custom - Execute Script - AD - Enable AD Recycle BinAlert TemplateExecutes the script AD - Enable AD Recycle Bin - V2 against the computers detected in the monitor set AD Recycle Bin State Check

Implementation​

  1. Import the role Role - AD Domain Recycle Bin Feature using the second step of the same document.

    • The role will take some time to be detected.

  2. Import the following script using the ProSync plugin:

  3. Import the following Alert Templates using the ProSync plugin:

    • △ Custom - Execute Script - AD - Enable AD Recycle Bin

  4. Reload the System Cache:

    • Reload System Cache

  5. Import the AD Recycle Bin State Check monitor following these steps:

    • Open a RAWSQL monitor.
    • Import the search "DC without Recycle Bin" using the third step in the Import - Remote Monitor - AD Recycle Bin State Check document. Run the provided SQL in the RAWSQL monitor.
    • Verify that the search "DC without Recycle Bin" is created successfully.
    • Import the monitor AD Recycle Bin State Check using the fourth step in the same document. Run the provided SQL in the RAWSQL monitor.
    • The AD Recycle Bin State Check monitor will be automatically created in the "Domain Controllers" group, limited to the search "DC without Recycle Bin," and with the alert template △ Custom - Execute Script - AD - Enable AD Recycle Bin.
    • Ensure that the alert template is running the AD - Enable AD Recycle Bin script.