Why are LDAP queries only returning 1000 results?

Why are LDAP queries only returning 1000 results?

LDAP queries only returning 1000 resultsIf you use open-source solutions within your organisation the chances are that you are using LDAP to connect to your Windows Active Directory environment. LDAP is an open protocol that can be used to query Directory services, Microsoft’s Active Directory being just one.

In Windows Server 2008 and above Microsoft have limited the number of results returned to LDAP queries. In Windows Server 2003 ldap queries used to return unlimited results but this can put a strain on servers in larger environments. Instead Microsoft recommend using page queries within your LDAP enabled app, with each page of results limited to 5000 records.

The end result of this can be that you only see 1000 user records returned in your LDAP enabled app instead of the thousands you may have. Fret not though, this can be resolved with a small tweak using ADSIEdit.

Removing the LDAP query limit

Do this at your own risk

Changing parameters in Active Directory can lead to all kinds of craziness and ultimately a dead server. Do this at your own risk and with backups nestled safely somewhere close by.
  1. On your AD server, install ADSIEdit, which is part of the Remote Server Administration Tools feature available within the Roles and Features tool on your server.
  2. Run ADSIEdit and right click the ADSIEdit node and choose Connect To.
    ADSIEdit
  3. From the “Select a well known naming context” drop down choose Configuration. Click Ok.
    ADSIEdit configuration
  4. Right click on Directory Service which can be found under CN=Configuration, CN=Services, CN=Windows NT. Choose Properties.
    ADSIDirectory
  5. Click dSHeuristic, and then click Edit. Change the value 000000000100000001 and click Ok.
    ADSIValue
  6. Lastly either reboot the server or restart the “Active Directory Domain Services” service (also known as NTDS).

 

Author

Oliver Marshall
Oliver works as a Director at Oakson who provide absolutely awesome IT support in Brighton, UK. Out of hours he's a runner with a limp, has a board game addiction and a owns a dog that looks like a badger.
Show Buttons
Hide Buttons

Stay in touch

or
Subscribe to my weekly newsletter

If you enjoyed this article then why not like my page.

Stay in touch

or
Subscribe to my weekly newsletter

If you enjoyed this article then why not like my page.