Maximum size of Active Directory searches

  • Article

User Configuration\AdministrativeTemplates\Desktop\Active Directory

Description

Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory.

This policy affects all browse displays associated with Active Directory, such as those in Local Users and Groups, Active Directory Users & Computers, and dialog boxes used to set permissions for user or group objects in Active Directory.

  • If you enable this policy, you can use the Number of objects returned box to limit returns from an Active Directory search.
  • If you disable this policy or do not configure it, the system displays up to 10,000 objects. This consumes approximately 2 MB of memory or disk space.

This policy is designed to protect the network and the domain controller from the effect of expansive searches.