Restore-ADObject not working

Question

_{Friday, February 1, 2013 6:36 AM}

Hi,

I am using the following command in windows 2008r2 ad powershell to restore a Deleted AD account and it fails with the given Error. Please help.

Restore-ADObject -identity e7cd01a2-c294-45cc-b99a-c45f43e88d2f

Restore-ADObject : Illegal modify operation. Some aspect of the modification is

 not permitted

At line:1 char:17

+ Restore-ADObject <<<<  -identity e7cd01a2-c294-45cc-b99a-c45f43e88d2f

    + CategoryInfo          : InvalidOperation: (CN=abc,DC

   =com:ADObject) [Restore-ADObject], ADIllegalModifyOperationException

    + FullyQualifiedErrorId : 0,Microsoft.ActiveDirectory.Management.Commands.

   RestoreADObject

Thanks in advance.

All replies (4)

_{Tuesday, February 5, 2013 5:04 AM ✅Answered}

Hi,

Please first run:

Get-ADOptionalFeature 'Recycle Bin Feature'

If it is not turned on,run below command:

Enable-ADOptionalFeature 'recycle Bin Feature' -Scope ForestOrConfigurationSet -Target 'fabrikam.com' -server dc1 

Regards,

Yan Li

Cataleya Li
TechNet Community Support

_{Tuesday, February 5, 2013 11:03 AM ✅Answered}

Hi,

check the step-by-setp guide:

http://technet.microsoft.com/en-us/library/dd392261%28v=ws.10%29.aspx

Kind regards,

Tim
MCITP, MCTS
http://directoryadmin.blogspot.com

This posting is provided 'AS IS' with no warranties or guarantees and confers no rights.

"If this thread answered your question, please click on "Mark as Answer"

_{Friday, February 1, 2013 9:49 PM}

Did you try this?

http://clintboessen.blogspot.com/2011/06/0x2077-illegal-modify-operation-some.html

_{Monday, February 4, 2013 12:08 AM}

This most likely happens if you haven't truned on the Recycle-Bin in Active Directory:
http://blogs.technet.com/b/askds/archive/2009/08/27/the-ad-recycle-bin-understanding-implementing-best-practices-and-troubleshooting.aspx

Enfo Zipper
Christoffer Andersson – Principal Advisor
http://blogs.chrisse.se - Directory Services Blog