This is a question possibly related to this. I just created a global security group, added 871 users, and they all have grey hair as opposed to the black hair that I see in every other security group. What does this mean?
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, April 12, 2005 1:21 PM To: [email protected] Cc: [email protected]; [EMAIL PROTECTED] Subject: RE: [ActiveDir] 1000 groups Hi All At DEC Sanji (SP) mentioned the limit in 2K3 is 1024 - once you have more then 1024 group memberships in your token you can no longer authenticate. Regards; James R. Day Active Directory Core Team Office of the Chief Information Officer National Park Service (202) 354-1464 (direct) (202) 371-1549 (fax) [EMAIL PROTECTED] |---------+----------------------------------> | | "Mulnick, Al" | | | <[EMAIL PROTECTED]>| | | Sent by: | | | [EMAIL PROTECTED]| | | tivedir.org | | | | | | | | | 04/12/2005 12:54 PM AST| | | Please respond to | | | ActiveDir | |---------+----------------------------------> >----------------------------------------------------------------------- -------------------------------------------------------| | | | To: [email protected] | | cc: (bcc: James Day/Contractor/NPS) | | Subject: RE: [ActiveDir] 1000 groups | >----------------------------------------------------------------------- -------------------------------------------------------| This is probably what you're referring to: (1023 sid's) http://support.microsoft.com/default.aspx?scid=kb;en-us;322970 & this: http://support.microsoft.com/kb/280830/ (much lower number) IIRC, 2003 domains can handle more, but I think ~Eric was the one that posted something about that. Maybe he or Dean will chime in? However, I can't think it would be very manageable to have users in that many groups in most organizations. Even with distribution groups, local groups, etc. It would seem to me that being a part of that many groups would set off all kinds of security and management issues as well as performance issues for the user. Al -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Fischer Sent: Tuesday, April 12, 2005 12:45 PM To: [email protected] Subject: [ActiveDir] 1000 groups Hi All: Can an AD user be a member of more that 1000 groups? Someone told me that 1000 was an AD limitation. Is that true? Thanks, --Brian E-mail Full? Check out our Exchange Tools! Brian Fischer Microsoft Systems Consultant Quest Software 4320 Winfield Rd Suite 500 Warrenville, IL 60555 < http://maps.yahoo.com/py/maps.py?Pyt=Tmap&addr=4320+Winfield+Rd&csz=Warr env ille%2C+IL+60555&country=us> [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> tel: fax: mobile: 630-836-3160 949-754-8999 630-567-2825 Last year's email - today's key piece of evidence! Find it fast with Quest Recovery Manager for Exchange. Get your free Technical Brief on e-Discovery <http://wm.quest.com/reg/marketing/landing/ediscoveryexchange/> . With Quest Software, you can expect more... more performance, more productivity, more value from your IT investments. Visit www.quest.com <BLOCKED::http://www.quest.com/> to learn how. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
