Trying to enable the AD DS Recycle bin, and it is failing with an error message (at end of post)
Going through the check list for enabling this feature, as well as numerous other posts from technet / Microsoft.
Forest Functional Level - ((get-adforest)) ForestMode:Windows2008R2Forest . Verified.
Credentials: My user is an Enterprise / Schema admin. I added it to Domain Admins specifically when this command failed as a test.
Running PowerShell as an Administrator (Elevated Privileges) :: or without, and it is the same result.
To double check the module load, import-module activedirectory has been run.
Enable-ADOptionalFeature -Identity 'Recycle Bin Feature' -Scope ForestOrConfigurationSet -Target xyz.priv ((where xyz.priv is my actual domain)) there are no sub-domains. Also, entering the Distinguished name for the recycle bin feature has the same results.
WARNING: Enabling 'Recycle Bin Feature' on 'CN=Partitions,CN=Configuration,DC=xyz,DC=priv' is an irreversible action! You will not be able to disable 'Recycle Bin Feature' on 'CN=Partitions,CN=Configuration,DC=xyz,DC=priv' if you proceed.
Enable-ADOptionalFeature : A referral was returned from the server at Line:1 char:25
+
Enable-AdoptionalFeature <<<< -Identity 'Recycle Bin Feature' -Scope ForestOrConfigurationSet -Target xyz.priv
+
CategoryInfo : NotSpecified: (Recycle Bin Feature:ADOptionalFeature) [Enable-ADOptionalFeature], ADException
+
FullyQualifiedErrorID : A Referral was returned from the server,Microsoft.ActiveDirectory.Management.Commands.EnableADOptionalFeature
Also - If I run just Enable-ADOptionalFeature it prompts me for -Identity, -Scope, -Target, and when supplied comes back with the same error.
I've tried this short hand, or with the full DN going as far as copying it from the atrribute set from Sites and Services. I even verified effective security permissions on the Recycle Bin Feature msDS object, and the configuration partition lists the object 'CN=xyz' crossRef properly when looking at it through ADSI edit.
Do I really have a typo somewhere, or process error?