Solved

Active Directory Recycle Bin

Posted on 2016-10-24
4
48 Views
Last Modified: 2016-10-26
I'm trying to use the Active Directory Recycle Bin to browse and recover deleted objects.  Everytime I open Active Directory Administrative Center and select deleted objects it will search and eventualy return "the operation returned because the timeout limit was exceeded".  My assumption is there is a time limit or number of objects limit for the query that is being reached.  Is there anyway around this issue or the ability to resolve so I can use the AD recycle
0
Comment
Question by:georgedschneider
  • 2
  • 2
4 Comments
 
LVL 29

Accepted Solution

by:
Rich Weissler earned 500 total points
ID: 41857532
The timeout you are hitting is set on the ADWS (Active Directory Web Services) on the domain controller.
On the relevant domain controller, navigate to %WINDIR%\ADWS and find the config file "Microsoft.ActiveDirectory.WebServices.exe.config".  Make a copy for safety, and edit in Notepad.  Find the "OperationTimeout" key... and modify to something larger than two minutes.   Restart ADWS (net stop ADWS; net start ADWS).

You might want to configure a filter as you attempt to browse the recycle bin, depending on how active your domain is.
0
 

Author Comment

by:georgedschneider
ID: 41857660
How can I create a filter to browse the recycle bin for example all deleted users or computer objects?
0
 

Author Comment

by:georgedschneider
ID: 41857775
I changed the valued to 10 minutes and the same result.  The search is timing out much sooner than 10 minutes in a minute or 2.
0
 
LVL 29

Expert Comment

by:Rich Weissler
ID: 41858476
> How can I create a filter to browse the recycle bin for example all deleted users or computer objects?
In ADAC, right click the 'Deleted Objects' container in Tree View, and select "Search under this node".

You'll have an option there to Convert to LDAP... which will bring up an LDAP query window.
(objectClass=user) will give you users and computers.  For some reason computers are users and computers.  :-(
(objectClass=computer) will give you computers.
I'm having more problems filtering out just users... but have had luck with (givenname=*).

To make certain I understand: the query (a) still times out after a minute or two, or (b) times out much sooner than a minute or two as well.  (And if (b), how long does it take for the search to timeout?)

Two possibilities: The query is actually running against an instance of ADWS for which the timeout hasn't been extended, or there is something else is broke which we need to find.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now