One nice thing is that some of the new features can easily run on a
member server or workstation and work fine in your current domains. You
don't need to convince anyone about a schema update or new Windows 8
Domain Controllers right now. Enjoy the new features with no risk (I'd
argue there is not a lot of risk in adding a domain controller but I
understand leadership wanting to wait on domain controllers)
One of those features is the
AD
Recycle Bin GUI. That is a nice addition that system
administrators have been asking for since 2008 R2 was released. Your
forest does have to be at 2008 R2 Forest Functional Level to enable the
recycle bin.
Many people enabled and used the
AD
Recycle Bin in 2008 R2 There are even some
3rd
party tools that can help and put a
GUI front end
around the Recycle Bin. In my opinion the GUI in Windows Server 8 is
much nicer and is definitely a reason to add a Windows Server 8 member
server now.
In my lab I have a 2008 R2 (forest functional level 2008 R2) Domain
Controller and a Windows Server 8 Beta member server.
|
Windows 2008 R2
Domain
|
SIDE NOTE: As you can see my test domain is
named
USMCThanksForYourService.mil I've heard there might be
some Marines stationed in Afghanistan reading this entry so a heartfelt
thanks for all you all do. It takes a lot of courage to be in the
military right now and you all are on the front lines. THANK YOU!!
SIDE NOTE II: Although I'm an Army vet I
support all branches of the military. Any other military members
reading my blog? Leave a comment, I'd love to hear from you.
So people don't think I'm cheating I'll first verify that the Recycle
Bin is not enabled by using the powershell command
Get-ADOptionalFeature
-Filter {name -like "*Recycle Bin*"} If EnabledScopes is empty
that indicates the Recycle Bin has not been enabled.
|
AD Recycle Bin
not enabled |
I also join the Windows Server 8 Beta machine to the domain.
|
Adding Windows 8
Server to the domain
|
Once the server is added to the USMCThanksForYourService.mil domain I
have to install the Remote Server Administration Tools (RSAT) Feature
for Active Directory so I can have access to the necessary AD tools and
fetures.
|
Adding Roles and
Features in Server Manager
|
|
Adding RSAT
Features |
|
Adding RSAT
Features Part II
|
Once the RSAT tools have been installed you are ready to
use Active Directory Administrative Center (ADAC) against your 2008 R2
domain.
You can enable the AD Recycle Bin from the GUI now instead of
the old way
using Powershell
|
Selecting ADAC
from Server Manager in Windows 8 |
|
Enabling the AD
Recycle Bin from Windows Server 8 Member Server ADAC
|
|
AD Recycle Bin
Confirmation 1
|
AD Recycle Bin Confirmation 2
|
|
Just want to confirm that the AD Recycle Bin has been
enabled. Notice this time the same command yielded an entry in
"EnabledScopes"...success
|
AD Recycle Bin
Enabled - Confirmation |
A quick tutorial of the new feature now that it is
enabled and the member server is up and ready to go.
As you can see there is a user named
Dakota Meyer who is
in the group "MedalofHonor"
A
young contractor was really excited and lost his mind and accidentally
deleted the account. Luckily the USMC leadership had allowed this
Windows 8 Member Server and Dakota's account would be restored in a few
clicks.
|
In ADAC Navigate
to the Deleted Objects Container |
|
Notice the
deleted user is listed. Right click on the user for Restore Options
|
|
In ADAC we
confirm that the user has been successfully restored
|
On the 2008 R2 DC the restore is confirmed
using ADUC |
|
No comments:
Post a Comment