مقدار مجاز تعریف یوزر AD

[sma.ffcc]

با سلام

با توجه به اینکه تعریف یوز در AD بی نهایت است ایا باید جایی در gp باید تعداد یوزر را معرفی کرد

---

موضوعات مشابه:

• تعداد یوزر در ou
• بهترین نرم افزار برای تعریف یوزر اکانتینگ کنترل اکانت یوزر چیست؟
• مشکل با نحوه تعریف یوزر جدید
• حداکثر تعداد یوزر در حالت HTB ؟
• تعداد یوزرهایی که در MDaemon می توان تعریف کرد

---

[Hakimi]

بی نهایت که نیست. تعداد Object هایی که می توان بر روی هر Domain Controller ایجاد کرد، کمی کمتر از 2.15 میلیارد Object است.

ولی این موضوع جایی نیاز نیست تعریف شود. از جمله در Group Policy !

Active Directory Maximum Limits Scalability Capacity

Maximum Number of Objects

Each domain controller in an Active Directory forest can create a little bit less than 2.15 billion objects during its lifetime.

Each Active Directory domain controller has a unique identifier that is specific to the individual domain controller. These identifiers, which are called Distinguished Name Tags (DNTs), are not replicated or otherwise visible to other domain controllers. The range of values for DNTs is from 0 through 2,147,483,393 (231 minus 255). As objects are created on a domain controller, a unique value is used. A DNT is not reused when an object is deleted. Therefore, domain controllers are limited to creating approximately 2 billion objects (including objects that are created through replication). This limit applies to the aggregate of all objects from all partitions (domain NC, configuration, schema, and any application directory partitions) that are hosted on the domain controller.

Because new domain controllers start with low initial DNT values (typically, anywhere from 100 up to 2,000), it may be possible to work around the domain controller lifetime creation limit—assuming, of course, that the domain is currently maintaining less than 2 billion objects. For example, if the lifetime creation limit is reached because approximately 2 billion objects are created, but 500 million objects are removed from the domain (for example, deleted and then permanently removed from the database through the garbage collection process), installing a new domain controller and allowing it to replicate the remaining objects from the existing domain controllers is a potential workaround. However, it is important that the new domain controller receives the objects through replication and that such domain controllers not be promoted with the Install from Media (IFM) option. Domain controllers that are installed with IFM inherit the DNT values from the domain controller that was used to create the IFM backup.

At the database level, the error that occurs when the DNT limit is reached is “Error: Add: Operations Error. <1> Server error: 000020EF: SvcErr: DSID-0208044C, problem 5012 (DIR_ERROR), data -1076.”