When using Active Directory Recycle Bin to recover objects with a large number of link-valued attributes

When you delete or recover an Active Directory object with link-valued attributes, AD DS must process the object’s link value table to maintain referential integrity on the linked attribute’s values. Because deleting or recovering an Active Directory object results in modifications to the object’s link value table, if you attempt to delete or recover an object during its ongoing link-value-table processing time, the operation will be blocked. For example, if you use the Active Directory Recycle Bin to recover a deleted object with a large number of link-valued attributes (for example, a group object with 10 million users) immediately after it was deleted (or anytime throughout the duration of its link-value-table processing), the object recovery will be blocked. (If you are using Ldp.exe to perform the recovery, you might see the following error message: “Error 0x2093 The operation cannot continue because the object is in the process of being removed.”)  For more information about Active Directory Recycle Bin, see Active Directory Recycle Bin Step-by-Step Guide (http://go.microsoft.com/fwlink/?LinkId=133971).  

This posting is provided “AS IS” with no warranties, and confers no rights.

Comments (1)

  1. Mike Kline says:

    "for example, a group object with 10 million users"

    …man I wonder how many AD’s have that sort of group.  I know there are a few out there, I’ve never worked on one.

    The recycle bin is one of the features I’m really looking forward to in an R2 forest…we may get there by 2013 🙂