Solved

Active Directory Recycle Bin

Posted on 2016-10-24
4
69 Views
Last Modified: 2016-10-26
I'm trying to use the Active Directory Recycle Bin to browse and recover deleted objects.  Everytime I open Active Directory Administrative Center and select deleted objects it will search and eventualy return "the operation returned because the timeout limit was exceeded".  My assumption is there is a time limit or number of objects limit for the query that is being reached.  Is there anyway around this issue or the ability to resolve so I can use the AD recycle
0
Comment
Question by:georgedschneider
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 500 total points
ID: 41857532
The timeout you are hitting is set on the ADWS (Active Directory Web Services) on the domain controller.
On the relevant domain controller, navigate to %WINDIR%\ADWS and find the config file "Microsoft.ActiveDirectory.WebServices.exe.config".  Make a copy for safety, and edit in Notepad.  Find the "OperationTimeout" key... and modify to something larger than two minutes.   Restart ADWS (net stop ADWS; net start ADWS).

You might want to configure a filter as you attempt to browse the recycle bin, depending on how active your domain is.
0
 

Author Comment

by:georgedschneider
ID: 41857660
How can I create a filter to browse the recycle bin for example all deleted users or computer objects?
0
 

Author Comment

by:georgedschneider
ID: 41857775
I changed the valued to 10 minutes and the same result.  The search is timing out much sooner than 10 minutes in a minute or 2.
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 41858476
> How can I create a filter to browse the recycle bin for example all deleted users or computer objects?
In ADAC, right click the 'Deleted Objects' container in Tree View, and select "Search under this node".

You'll have an option there to Convert to LDAP... which will bring up an LDAP query window.
(objectClass=user) will give you users and computers.  For some reason computers are users and computers.  :-(
(objectClass=computer) will give you computers.
I'm having more problems filtering out just users... but have had luck with (givenname=*).

To make certain I understand: the query (a) still times out after a minute or two, or (b) times out much sooner than a minute or two as well.  (And if (b), how long does it take for the search to timeout?)

Two possibilities: The query is actually running against an instance of ADWS for which the timeout hasn't been extended, or there is something else is broke which we need to find.
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question