Re: Single OU limitations

"Richard Mueller" <rlmueller-NOSPAM@xxxxxxxxxxxxxxxxxxxx> wrote in message
I believe it doesn't matter whether 14,000 users are in one OU or 20.
However, there could be issues with group membership. In Windows 2000 it
was recommended that no group have more than 5,000 users. I believe this
limitation is removed in W2k3.


The above is accurate if you add "under certain MODES in
Win2003".

The main issue is convenience of displaying an OU.

Just because you have a single OU doesn't mean you must
put all of the objects in a single Group.

Of course with those counts Native(+) mode with group
nesting will also make more sense than such giant groups
(even if supported by domain mode.)

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

"Richard Mueller" <rlmueller-NOSPAM@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:uCPB0taVGHA.328@xxxxxxxxxxxxxxxxxxxxxxx

"Herb Martin" <news@xxxxxxxxxxxxxx> wrote in message
news:OK1UaSaVGHA.1232@xxxxxxxxxxxxxxxxxxxxxxx
"cub_s1" <cubs1@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6FEC0DD5-5F8F-4FFC-9D54-A7DBA9158950@xxxxxxxxxxxxxxxx
Hi
Is there any limit of objects in single OU. I've w2k3 sp1 ent. ed. and
over
14 000 of users. I've problem with adding another users's object to this
OU.

There are no (reasonable low) such restrictions
except convenience. OUs that big are a giant
nuisance to view and edit.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]


Brgds.



I believe it doesn't matter whether 14,000 users are in one OU or 20.
However, there could be issues with group membership. In Windows 2000 it
was recommended that no group have more than 5,000 users. I believe this
limitation is removed in W2k3.

--
Richard
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net



.

Relevant Pages

  • [NT] Limitations in Cisco Secure Desktop
    ... Get your security news from a reliable source. ... Cisco has been made aware of limitations in the Cisco Secure Desktop (CSD) ... Information Leakage via Windows Paging File: ... This limitation is the inability to prevent data from leaking to the ...
    (Securiteam)
  • Re: WindowsTokenRoleProvider & Domain Groups
    ... It looks to me that if Windows auth in ASP.NET works for you, ... just use Context.User.IsInRole to look at group membership. ... IIS vdir Directory Security is set to only Integrated Windows ... account to my domain account and leaving impersonate on. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: IsInRole & SID/Token Caching in .NET v1.1
    ... Remember also that if you update group membership on a domain, ... domain controllers, thus when you restart your service (login the ... > I'm building will be used by ASP.NET apps and also by Windows Services. ... > WindowsIdentity from the target UPNName, ...
    (microsoft.public.dotnet.security)
  • Re: what was it ?
    ... When IDE drives were first introduced, ... MS DOS and Windows 3.1 used FAT16 architecture, ... Windows 95 was originally released with this limitation ... NT4.0 did not recognize FAT partitions). ...
    (freebsd-questions)
  • Re: General questions about LDAP, GC and access permissions
    ... using Windows Communicaiton Foundation, ... is that we get a combination of all permissions that may be directly assigned ... users and groups and assigning various permissions to those. ... calculate a user's group membership in the user's logon token. ...
    (microsoft.public.windows.server.active_directory)