Renaming OU name can exceed the OU max length

Guy Franco 1 Reputation point
2022-02-15T05:15:02.113+00:00

Hi,

I've encountered a weird scenario which I am not sure how is it possible.
After creating an OU, you can actually change the name of the OU to be a name with 132 characters, even though the limit for OU name length is 64 characters. how it that possible?

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Gary Reynolds 9,621 Reputation points
    2022-02-15T09:52:53.473+00:00

    Hi @Guy Franco

    There are multiple attributes used to name an object in AD, as you can see from below, they have different maximum lengths. When you create an OU object in ADUC, the maximum length of the name is based on the max OU length - 3 characters, to accommodate the rDNAttID i.e. 'ou='. However, once the object is created, you can rename the OU in ADUC, and you can exceed the 64 character limit and the name can be up to 256 characters - 3 characters.

    174380-image.png

    Once you exceed the max length for the OU, the OU attribute will be truncated to its maximum length, which can cause duplicate name issues.

    174410-image.png

    Gary.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.