Hi, Not sure it's the right place to ask this, but nevertheless. There're 3 DCs at the moment: two Windows Server 2008 R2 (vm-dc1 has all master roles, vm-dc2) and one Samba 4.12.0 (vm-dc4). I've discovered, that the Deleted Objects container entries are located on the Samba DC only: ld = ldap_open("vm-dc1", 389); Established connection to vm-dc1. res = ldap_simple_bind_s(ld, 'cn=administrator,cn=users,dc=domain,dc=com', <unavailable>); // v.3 Authenticated as: 'DOMAIN\Administrator'. ldap_search_ext_s(ld, "CN=Deleted Objects,DC=domain,DC=com", 1, "(objectClass=*)"), attrList, 0, svrCtrls, ClntCtrls, 60, 1000 ,&msg) Getting 0 entries: ld = ldap_open("vm-dc2", 389); Established connection to vm-dc2. res = ldap_simple_bind_s(ld, 'cn=administrator,cn=users,dc=domain,dc=com', <unavailable>); // v.3 Authenticated as: 'DOMAIN\Administrator'. ldap_search_ext_s(ld, "CN=Deleted Objects,DC=domain,DC=com", 1, "(objectClass=*)"), attrList, 0, svrCtrls, ClntCtrls, 60, 1000 ,&msg) Getting 0 entries: ld = ldap_open("vm-dc4", 389); Established connection to vm-dc4. res = ldap_simple_bind_s(ld, 'cn=administrator,cn=users,dc=domain,dc=com', <unavailable>); // v.3 Authenticated as: 'DOMAIN\Administrator'. ldap_search_ext_s(ld, "CN=Deleted Objects,DC=domain,DC=com", 1, "(objectClass=*)"), attrList, 0, svrCtrls, ClntCtrls, 60, 1000 ,&msg) Getting 290 entries: ... Is that a correct behavior? -- Best regards, Alex