How do I modify the number of Active Directory objects to search?
By default, Active Directory (AD) searches 10,000 objects at a time. This
policy affects all browse displays associated with AD (e.g., those in Local
Users and Groups), the Microsoft Management Console (MMC) Active Directory Users
and Computers snap-in, and the dialog boxes you use to set permissions for user
or group objects in AD. As your organization grows, you might need to change the
number of objects to search.
To set the number for a group policy object,
- Start the MMC Active Directory Users and Computers snap-in. (Select
Programs, Administrative Tools, Active Directory Users and Computers from
the Start menu.)
- Right-click the container, and select Properties.
- Select the Group Policy tab.
- Select the Group Policy Object, and select Edit.
- Select the User Configuration branch, and expand Administrative Templates,
Desktop, Active Directory.
- Double-click Maximum size of Active Directory searches.
- Select Enabled, and set the number (e.g., 20000), as the Screen shows.
- Click OK.
- Close the Group Policy Editor.
To edit the registry to set the number for a user,
- Start regedit.
- Go to the HKEY_CURRENT_USER\Software\Policies\Microsoft registry entry.
- From the Edit menu, select New, Key.
- Select the Windows key, and from the Edit menu, select New, Key.
- Go to the Directory UI key, and from the Edit menu, select New, DWORD
and press Enter.
- Double-click the new value, and set the decimal value.
- Click OK.
- Close the registry editor.
For both methods, the change will take effect when the user logs on the next