Solved

PutEx - add\remove or just replace

Posted on 2010-09-17
1
980 Views
Last Modified: 2012-05-10
I'm writing some scripts that will update some distribution groups.  In these scripts I'm generating an array that has all the DN's of the correct list of members and then comparing that with the current membership of the group.  Some of these groups are VERY large, as in well over 1,500 members.  The goal being to make the group membership match the 'correct' list that I generate originally.

My question is with PutEx and the efficiency from an Active Directory perspective with regards to using the add\remove operations of PutEx (3 and 4) vs. just replacing the entire membership (2).

Is there such a big different in efficiency (and perhaps replication) if I'm editing large lists where I should use the add\remove operations vs. just using replace?
0
Comment
Question by:evetsleep
1 Comment
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 33723363

Depending on the functional level of your forest (at least 2003), and the operational level of the group (not all groups have this enabled, depends when the group was created). But in theory, PutEx 3 / 4 should be far more efficient than replacing the entire list.

This is making a few assumptions about the efficiency of LVR (Linked Value Replication) when the majority of the contents do not change, but it's about the only aspect that's going to come into play here.

If your functional level is lower then the entire member attribute will replicate regardless of the number of changes. If LVR is in operation it should only replicate the change to the attribute (not the entire attribute).

HTH

Chris
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Windows Server Update Service (WSUS) is free for everyone, but it lacks of some desirable features like send an e-mail to the administrator with the status of all computers on the WSUS server. This article is based on my PowerShell script …
Active Directory replication delay is the cause to many problems.  Here is a super easy script to force Active Directory replication to all sites with by using an elevated PowerShell command prompt, and a tool to verify your changes.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question