Enable the AD Recycle Bin in the AD domain to retrieve deleted users, 2008R2 and 2012R2

1No directory services available during authorized recovery recovery

1.1 We can only restore the state of objects from the last running backup

1.2 The process of authorizing recovery is not convenient, at least we have to shut down the directory service

2 Recycle Bin Recovery

2.1 Enable Satisfied Condition

2.1.1 Forest functional level must be above 2008R2.

2.2 Command enabled in 2008r2

Enable-ADOptionalFeature -Identity 'CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration, DC=contoso,DC=com' -Scope ForestOrConfigurationSet -Target 'contoso.com'

Get-adobject -filter {displayname -eq "High Hope"} -includeDeletedObjects

Get-adobject -filter {displayname -eq "High Hope"} -includeDeletedObjects| Restore-Adobject

2.3 Open AD Recycle Bin in 2012R2, the operation is simpler, no command is required