LDAP User Imports using Active Directory can only create 1000 Users?

Applies To: Models 1000, 2000, 3000

Active Directory has a default limit of 1000 entries that can be returned from a query. With large queries, the results may be truncated. If ePrism fails to import all the users or groups it is possible to increase a certain value in Active Directory to allow ePrism to import all users.

Use the following procedure to modify the default maximum page size in limit in Active Directory:

  1. Login in the Active Directory system as the administrator

  2. Open a command prompt:

C:\> ntdsutil
ntdsutil: ldap policies
ldap policy: connections
server connections: connect to server [Servername]
Connected to [Servername] using credentials of locally logged on user
server connections: q
ldap policy: show values
Policy Current(New)
MaxPoolThreads 4
MaxDatagramRecv 1024
MaxReceiveBuffer 10485760
InitRecvTimeout 120
MaxConnections 5000
MaxConnIdleTime 900
MaxActiveQueries 20
MaxPageSize 1000
MaxQueryDuration 120
MaxTempTableSize 10000
MaxResultSetSize 262144
MaxNotificationPerConn 5

ldap policy: set maxpagesize to 50000 (for example 50000)
ldap policy: commit changes
ldap policy: q
ntdsutil: q
Disconnecting from [Servername]

See the following Microsoft article for more details on:

How to view and set LDAP policy in Active Directory by using Ntdsutil.exe