Source: https://angry-admin.blogspot.com/2017/0 ... eSize.html
View and Change Active Directory MaxPageSize
MaxPageSize - This value controls the maximum number of objects that are returned in a single search result, independent of how large each returned object is. To perform a search where the result might exceed this number of objects, the client must specify the paged search control. This is to group the returned results in groups that are no larger than the MaxPageSize value. To summarize, MaxPageSize controls the number of objects that are returned in a single search result.
Default value: 1,000
Some LDAP clients can only receive the first 1,000 results when they make an LDAP question to Active Directory, when more results be that requite the query scope. If there are 2,000 results to be returned, the client will receive the “Size Limit Exceeded” error when the paging is not enabled or not present.
How we can view or change MaxPageSize value?
Open ntdsutil
- AD-maxpagesize-01.PNG (5.19 КБ) 677 просмотров
To view policy settings
1. At the Ntdsutil.exe command prompt, type LDAP policies
ntdsutil: LDAP policies
- AD-maxpagesize-02.PNG (9.86 КБ) 677 просмотров
2. At the LDAP policy command prompt, type connections
ldap policy: connections
- AD-maxpagesize-03.PNG (11 КБ) 677 просмотров
3. At the server connection command prompt, type connect to server <DNS name of server>
server connections: connect to server <DNS name of server>
Binding to <DNS name of server> ...
Connected to <DNS name of server> using credentials of locally logged on user.
4. At the server connection command prompt, type q
server connections: q
5. At the LDAP policy command prompt, type Show Values
ldap policy: show values
To change policy settings
1. At the LDAP policy command prompt, type
ldap policy: Set MaxPageSize to 2000
We can use the Show Values command to verify changes.
2. To save the changes, use Commit Changes at the LDAP policy command prompt
ldap policy: commit changes
3. For return enter q
ldap policy: q
4. To quit Ntdsutil.exe, at the command prompt, enter q.
ntdsutil: q
Note: If you change the values for the query policy that a domain controller is currently using, those changes take effect without a reboot.