We generally keep our hands off the customer's AD's and domain controllers as it's a liability for us to directly tell the customer what do change or make the changes ourselves. However, giving a user permission to read the deleted objects container is as follows:

  1. Open Active Directory Users and Computers: 
    1. On a Windows Server machine or a computer with the Remote Server Administration Tools (RSAT) installed, open the Active Directory Users and Computers console. 
  2. Enable Advanced Features: 
    1. In the ADUC console, click on "View" in the menu, and ensure that "Advanced Features" is checked. This will enable additional features, including the Security tab. 
  3. Navigate to Deleted Objects Container: 
    1. Expand your domain in the console tree and navigate to the "View" menu. Choose "Advanced Features" if it's not already selected. 
    2. Locate the "Deleted Objects" container. By default, it's not visible, but with "Advanced Features" enabled, you should be able to see it. 
  4. Access the Properties of Deleted Objects Container: 
    1. Right-click on the "Deleted Objects" container and select "Properties." 
  5. Modify Security Settings: 
    1. Go to the "Security" tab in the Properties window. 
    2. Click on "Advanced" to access the advanced security settings. 
  6. Add Domain Admins Group: 
    1. Click on "Add" to add a new permission entry. 
    2. In the "Enter the object names to select" field, type "Domain Admins" and click "Check Names" to verify the group. 
    3. Click "OK" to add the group. 
  7. Set Permissions: 
    1. In the "Permission Entry" window, set the permissions for the Domain Admins group. For read access, you can grant "Read all properties" and "Read permissions." 
    2. Click "OK" to apply the changes. 
  8. Apply Changes: 
    1. Back in the "Advanced Security Settings" window, ensure that the permissions are applied to "This object and all descendant objects." 
    2. Click "OK" to close the advanced settings. 
  9. Close Properties: 
    1. Click "OK" on the Properties window to close it.