Solved

Active Directory Recycle Bin

Posted on 2016-10-24
4
56 Views
Last Modified: 2016-10-26
I'm trying to use the Active Directory Recycle Bin to browse and recover deleted objects.  Everytime I open Active Directory Administrative Center and select deleted objects it will search and eventualy return "the operation returned because the timeout limit was exceeded".  My assumption is there is a time limit or number of objects limit for the query that is being reached.  Is there anyway around this issue or the ability to resolve so I can use the AD recycle
0
Comment
Question by:georgedschneider
  • 2
  • 2
4 Comments
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 500 total points
ID: 41857532
The timeout you are hitting is set on the ADWS (Active Directory Web Services) on the domain controller.
On the relevant domain controller, navigate to %WINDIR%\ADWS and find the config file "Microsoft.ActiveDirectory.WebServices.exe.config".  Make a copy for safety, and edit in Notepad.  Find the "OperationTimeout" key... and modify to something larger than two minutes.   Restart ADWS (net stop ADWS; net start ADWS).

You might want to configure a filter as you attempt to browse the recycle bin, depending on how active your domain is.
0
 

Author Comment

by:georgedschneider
ID: 41857660
How can I create a filter to browse the recycle bin for example all deleted users or computer objects?
0
 

Author Comment

by:georgedschneider
ID: 41857775
I changed the valued to 10 minutes and the same result.  The search is timing out much sooner than 10 minutes in a minute or 2.
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 41858476
> How can I create a filter to browse the recycle bin for example all deleted users or computer objects?
In ADAC, right click the 'Deleted Objects' container in Tree View, and select "Search under this node".

You'll have an option there to Convert to LDAP... which will bring up an LDAP query window.
(objectClass=user) will give you users and computers.  For some reason computers are users and computers.  :-(
(objectClass=computer) will give you computers.
I'm having more problems filtering out just users... but have had luck with (givenname=*).

To make certain I understand: the query (a) still times out after a minute or two, or (b) times out much sooner than a minute or two as well.  (And if (b), how long does it take for the search to timeout?)

Two possibilities: The query is actually running against an instance of ADWS for which the timeout hasn't been extended, or there is something else is broke which we need to find.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article runs through the process of deploying a single EXE application selectively to a group of user.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question