This utility allows you to enable Recycle Bin support when you are managing a subtree of a domain. If the domain access account does not have permissions on the hidden NetIQRecycleBin container in the specified domain, DRA cannot move deleted accounts to the Recycle Bin.
NOTE:After using this utility to enable the Recycle Bin, perform a full accounts cache refresh to ensure the Administration server applies this change.
You can use this utility to perform the following tasks:
Verify that the specified account has read permissions on the NetIQRecycleBin container in the specified domain
Delegate read permissions to a specified account
Display security settings for the NetIQRecycleBin container
By default, you can run the Recycle Bin Utility from the Program Files (x86)\NetIQ\DRA folder on your Administration server. You can install and run the Recycle Bin Utility on a computer that is not an Administration server. To install this utility, choose custom installation in the setup program. For more information about performing a custom installation, see the Installation Guide.
To use this utility, you must have the following permissions:
|
If you want to … |
You need this permission … |
|
Verify account permissions |
Read Permissions access to the NetIQRecycleBin container |
|
Delegate read permissions on the NetIQRecycleBin container |
Administrator permissions in the specified domain |
|
Display security settings for the NetIQRecycleBin container |
Read Permissions access to the NetIQRecycleBin container |
DRARECYCLEBINUTIL /DOMAIN: DOMAINNAME [/DC: COMPUTERNAME ] {/DELEGATE: ACCOUNTNAME | /VERIFY: ACCOUNTNAME | /DISPLAY}
The following options enable you to configure the Recycle Bin Utility:
|
/DOMAIN:domain |
Specifies the NETBIOS or DNS name of the domain where the Recycle Bin is located. |
|
/SERVER: computername |
Specifies the name or IP address of the domain controller for the specified domain. |
|
/DELEGATE: accountname |
Delegates permissions to the specified account. |
|
/VERIFY: accountnam e |
Verifies permissions of the specified account. |
|
/DISPLAY |
Displays security settings for the NetIQRecycleBin container in the specified domain. |
The following examples demonstrate sample commands for common scenarios.
To verify that the MYCOMPANY\JSmith user account has read permissions on the NetIQRecycleBin container in the hou.mycompany.com domain, enter:
DRARECYCLEBINUTIL /DOMAIN:HOU.MYCOMPANY.COM /VERIFY:MYCOMPANY\JSMITH
To delegate read permissions on the NetIQRecycleBin container in the MYCOMPANY domain to the MYCOMPANY\DraAdmins group, enter:
DRARECYCLEBINUTIL /DOMAIN:MYCOMPANY /DELEGATE:MYCOMPANY\DRAADMINS
To display security settings for the NetIQRecycleBin container in the hou.mycompany.com domain using the HQDC domain controller, enter:
DRARECYCLEBINUTIL /DOMAIN:HOU.MYCOMPANY.COM /DC:HQDC /DISPLAY