Solved

Chaning the LDAP Policies on Domain Controller

Posted on 2011-02-25
3
432 Views
Last Modified: 2012-05-11
Hi guys,
So here is my case;

I have added a linked server in MS SQL to ADSI (OLEDB LDAP), and created multiple views for other business applications to use for query to AD. But I quickly found out the 1000 row limit (in the LDAP Policy, MaxPageSize). I know that we can use ntdsutil to change the policy, but I also found a lot of people warning / not advising to change the policy..

So what do you guys think ? We have a large enterprise AD with multiple child domains, sites and around 60 domain controller wordwide. (So I don't what to f*ck shit up..)
(We run Windows 2003 R2 Domain Controllers and MS SQL 2005)

Thanks for all feedback ;-)  
0
Comment
Question by:dds_felles
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 27

Accepted Solution

by:
KenMcF earned 250 total points
ID: 34978779
It is highly NOT recomended to change this setting. You will put extra overhead on all your domain controllers. The best thing to do here is fix your code. You should be using paged searches when doing queries against AD.
0
 
LVL 11

Assisted Solution

by:Tasmant
Tasmant earned 250 total points
ID: 34978859
I think you cannot do it, it's described here: http://msdn.microsoft.com/en-us/library/ms190803.aspx
Only 1000 results can be returned by the OLE DB provider.
0
 
LVL 1

Author Comment

by:dds_felles
ID: 35015030
Hi guys,

Thanks for the feedback, I did some changes in my SQL view (used the "union all" clause), worked like a charm ;-)

0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question