DFS-N: The LDAP timeout value should be set to the default value of 30 seconds

Updated: June 30, 2010

Applies To: Windows Server 2008 R2, Windows Server 2012

This topic is intended to address a specific issue identified by a Best Practices Analyzer scan. You should apply the information in this topic only to computers that have had the File Services Best Practices Analyzer run against them and are experiencing the issue addressed by this topic. For more information about best practices and scans, see Best Practices Analyzer.

Operating System

Windows Server 2008 R2

Product/Feature

File Services

Severity

Warning

Category

Configuration

Issue

The Lightweight Directory Access Protocol (LDAP) timeout value is different from the default, which is 30 seconds.

Impact

The DFS Namespace service may not be able to query or recover from a temporary failure of Active Directory Domain Services (AD DS).

Resolution

Use the Dfsutil command-line tool to set the LDAPTimeoutValueInSeconds registry value on this namespace server to 30.

To set the LDAP timeout value

  1. To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.

  2. Type: Dfsutil server registry ldaptimeoutvalue set 30 \\<servername>, where <servername> is the name of the affected namespace server (the local server).