Windows Server / Active Directory & Group Policy
Check whether an AD object is deleted before recreating its name
Recreating an object with the same name does not preserve its original identity or permissions. Search approved deleted-object metadata first.
Environment and inputs: Windows Server 2022 / 2025 baseline · Windows PowerShell with the specified role or RSAT modules; native utilities are identified in the text. Use delegated administration and elevation only where required.
Start with this check
Confirm the host, shell and access role. Replace sample names, paths, domains and interfaces with approved targets. These are diagnostic commands; assess policy and workload impact before making changes.
Get-ADObject -Filter 'isDeleted -eq $true -and Name -like "APP-SERVER*"' -IncludeDeletedObjects -Properties lastKnownParent
Read the result
With delegated AD access, this searches illustrative deleted-object names. Results depend on deletion retention, visibility and the object's state.
Resolve and verify
Confirm the original object and deletion timeline with the directory owner. Use the supported recovery workflow when available and verify dependent access afterward.
Before changing production
Do not recreate accounts or restore guessed objects merely because their display names match.