Error "Protect Error 1017: One or more folders are not accessible in the active directory. " When attempting AD connection

Products

• Data Loss Prevention Core Package

Issue/Introduction

When DLP is attempting to connect to AD the following error occurs:
"Protect Error 1017: One or more folders are not accessible in the active directory."

Powershell Get-ADGroupMember query reports the following error:

"The size limit for this request was exceeded"

Cause

This is believed to be an AD problem where the data set being returned for this specific object is too large. Possibly caused by recursive objects.

Resolution

Unconfirmed resolution. Work with the AD team to reduce the size of the result set.