How to Enable Active Directory Recycle Bin
Applies to: Windows Server 2019, 2022 and 2025.
Recycle Bin preserves deleted-object attributes for supported restoration. Enabling it is forest-wide and irreversible.
Active Directory changes affect authentication across the environment. Use tested backups, separate privileged accounts and a maintenance plan. See networkmanager.info for managed Windows VPS services.
Prerequisites
- Confirm the forest functional level.
- Verify replication health.
- Take system-state backups.
- Obtain approval for the irreversible change.
Procedure
Step 1: Check feature state
Read forest mode and enabled scopes.
Get-ADForest | Select ForestMode
Get-ADOptionalFeature -Identity 'Recycle Bin Feature' | Select Name,EnabledScopesStep 2: Validate replication
Fix failures first.
repadmin /replsummaryStep 3: Enable
Target the forest DNS name.
Enable-ADOptionalFeature 'Recycle Bin Feature' -Scope ForestOrConfigurationSet -Target 'corp.example'Step 4: Allow replication
Wait for configuration-partition replication.
Step 5: Practice restore
Use a controlled test OU before an incident.
Verification
EnabledScopes should contain the forest configuration.
Get-ADOptionalFeature -Identity 'Recycle Bin Feature' | Select Name,EnabledScopesRollback and recovery
The feature cannot be disabled. Recovery planning must use restore procedures and backups.
Operational notes
Recycle Bin is useful but does not replace system-state protection.
Official references
Explore managed Windows Server hosting from Netcloud24 Canada.
