e you
did in 2k.
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: Freitag, 15. April 2005 01:17To:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] 1000
groups
Not so much a myth as a general guideline.
:o)
There are people who do and have broken in the
in the token to limit it's size ;-)
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: Freitag, 15. April 2005 01:57To:
ActiveDir@mail.activedir.org; 'Send - AD mailing list'Subject: RE:
[ActiveDir] 1000 groups
Ah Domain Local Group (DLG) SIDS... Sorry, I misread your
post
in the token to limit it's size ;-)
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: Freitag, 15. April 2005 01:57To:
ActiveDir@mail.activedir.org; 'Send - AD mailing list'Subject: RE:
[ActiveDir] 1000 groups
Ah Domain Local Group (DLG) SIDS... Sorry, I misread your
packet size
issue as well, default max packet being 10MB
(MaxReceiveBuffer=10485760).
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier,
GuidoSent: Friday, April 15, 2005 3:20 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] 1000
groups
Regular
to store RIDs
in the token to limit it's size ;-)
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: Freitag, 15. April 2005 01:57To:
ActiveDir@mail.activedir.org; 'Send - AD mailing list'Subject: RE:
[ActiveDir] 1000 groups
Ah Domain Local Group (DLG) SIDS... Sorry
, April 14, 2005
6:38 PM
To: Send - AD mailing list
Subject: RE: [ActiveDir] 1000
groups
That's not the way I
understand the token construct in later-than-NT4 Windows builds. As I
understand it, the effective token is the result of the combined TGT and
Session ticket PAC (portions directly
: RE: [ActiveDir] 1000
groups
Just a related thought
to this, you might want to be aware of the following change that was put into
W2K3/SP1:
http://support.microsoft.com/kb/832572/
Mike
Thommes
-Original
Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Dean
ribute add you try to do
after that. You can update already existing attributes, you simply can't add
more.
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]Sent: Tuesday, April 12, 2005 4:01
PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir]
1
PROTECTED] On Behalf Of Dean
WellsSent: Tuesday, April 12, 2005 1:39 PMTo: Send - AD
mailing listSubject: RE: [ActiveDir] 1000 groups
Firstly, the so-called well-known ~1000 limitation and
the ~5000 limitation are entirely unrelated.
Regarding token bloat; the more accurate max. SIDs
value is 1015
]
[mailto:[EMAIL PROTECTED] On Behalf Of Dean
WellsSent: Tuesday, April 12, 2005 1:39 PMTo: Send - AD
mailing listSubject: RE: [ActiveDir] 1000 groups
Firstly, the so-called well-known ~1000 limitation and
the ~5000 limitation are entirely unrelated.
Regarding token bloat; the more accurate max
: Send - AD
mailing listSubject: RE: [ActiveDir] 1000 groups
That's
not the way I understand the token construct in later-than-NT4 Windows
builds. As I understand it, the effective token is the result of the
combined TGT and Session ticket PAC (portions directly derived from the TGT
5000 is the 'recommended' limitation for groups on both
Win2k and Win2k3 - but that limitation is only due to replication issues with
AD.
-Jon
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian
FischerSent: Tuesday, April 12, 2005 12:45 PMTo:
This is probably what you're referring to:
(1023 sid's) http://support.microsoft.com/default.aspx?scid=kb;en-us;322970
this: http://support.microsoft.com/kb/280830/ (much lower number)
IIRC, 2003 domains can handle more, but I think ~Eric was the one that
posted something about that. Maybe he
:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, April 12, 2005 9:49
AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 1000
groups
5000 is the 'recommended' limitation for
groups on both Win2k and Win2k3 - but that limitation is only due to
replication issues with AD
: 12 April 2005 17:49
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 1000
groups
5000 is the 'recommended' limitation for
groups on both Win2k and Win2k3 - but that limitation is only due to
replication issues with AD.
-Jon
From:
[EMAIL PROTECTED] [mailto:[EMAIL
Firstly, the so-called well-known ~1000 limitation and
the ~5000 limitation are entirely unrelated.
Regarding token bloat; the more accurate max. SIDs
value is 1015. This is due to 9 well-known SIDs that are always present
and should, therefore, not be part of any calculation as to what we
PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, April 12, 2005 1:21 PM
To: ActiveDir@mail.activedir.org
Cc: ActiveDir@mail.activedir.org; [EMAIL PROTECTED]
Subject: RE: [ActiveDir] 1000 groups
Hi All
At DEC Sanji (SP) mentioned the limit in 2K3 is 1024 - once you have
more
then 1024 group
PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, April 12, 2005 1:21 PM
To: ActiveDir@mail.activedir.org
Cc: ActiveDir@mail.activedir.org; [EMAIL PROTECTED]
Subject: RE: [ActiveDir] 1000 groups
Hi All
At DEC Sanji (SP) mentioned the limit in 2K3 is 1024 - once you have
more then 1024 group
You may be referring to http://support.microsoft.com/?kbid=281923
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long
Sent: 12 April 2005 19:00
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 1000 groups
This is a question possibly
Thanks. I couldn't seem to find the correct search terms to find the
answer.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Coleman, Hunter
Sent: Tuesday, April 12, 2005 2:05 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 1000 groups
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long
Sent: Tuesday, April 12, 2005 2:00 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 1000 groups
This is a question possibly related to this. I just created a global
security group, added 871 users, and they all have grey
Thanks Everyone.that cleared it up!!.except my hair is turning
grey**
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells
Sent: Tuesday, April 12, 2005 1:13 PM
To: Send - AD mailing list
Subject: RE: [ActiveDir] 1000 groups
I believe
: Tuesday, April 12, 2005
11:59 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] 1000
groups
Group
memberships are replicated in W2K3 per object as opposed to the whole group. In
w2k there is a hard limit of 5000 members per group but a group can be nested
in another group giving you
] On Behalf Of Dean Wells
Sent: Tuesday, April 12, 2005 2:13 PM
To: Send - AD mailing list
Subject: RE: [ActiveDir] 1000 groups
I believe it means the user has not yet been verified against a GC ... can't
seem to find the reference material I thought I had so that's solely off the
top of my head
: Wednesday, April 13, 2005
1:39 AM
To: Send - AD mailing list
Subject: RE: [ActiveDir] 1000
groups
Firstly, the so-called well-known ~1000
limitation and the ~5000 limitation are entirely unrelated.
Regarding token bloat; the more accurate
max. SIDs value is 1015. This is due to 9
25 matches
Mail list logo
