We are using Windows 2003 AD and running 2003 native mode. I remember in
Windows 2000 the group has limitation of 5000 users. What is it in Windows
2003? Does it have any limit? Since everyone will be in the Domain Users
group? Is there a limit in Windows 2003 for this group? How about Domain
Computers?

another question is how to change user's primary group. By default, they
are in Domain users. The "set primary group" is greyed out. Is it due to my
permission? I don't need to change it but would like to know how to change
it.

Thanks.

Re: group member limitation, any more? by Brian

Brian
Wed Mar 26 11:22:22 PDT 2008

LVR with 2003 gets rid of the 5,000 limit.


"Chris" <Chris@discussions.microsoft.com> wrote in message
news:E6F89F25-7E9F-4E29-A5BC-D5734390E994@microsoft.com...
> We are using Windows 2003 AD and running 2003 native mode. I remember in
> Windows 2000 the group has limitation of 5000 users. What is it in
> Windows
> 2003? Does it have any limit? Since everyone will be in the Domain Users
> group? Is there a limit in Windows 2003 for this group? How about Domain
> Computers?
>
> another question is how to change user's primary group. By default, they
> are in Domain users. The "set primary group" is greyed out. Is it due to
> my
> permission? I don't need to change it but would like to know how to
> change
> it.
>
> Thanks.


Re: group member limitation, any more? by Jorge

Jorge
Wed Mar 26 12:38:54 PDT 2008

Hi
Also read this MS doc.
http://download.microsoft.com/download/8/f/3/8f36dfe4-47d0-4775-ad5a-5614384921aa/AccessTokenLimitation.doc

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services


Re: group member limitation, any more? by Chris

Chris
Wed Mar 26 12:58:16 PDT 2008

thanks for the answer. How about my question for changing primary group?
It's greyed out.

"Jorge Silva" wrote:

> Hi
> Also read this MS doc.
> http://download.microsoft.com/download/8/f/3/8f36dfe4-47d0-4775-ad5a-5614384921aa/AccessTokenLimitation.doc
>
> --
> I hope that the information above helps you.
> Have a Nice day.
>
> Jorge Silva
> MCSE, MVP Directory Services
>

Re: group member limitation, any more? by Jorge

Jorge
Wed Mar 26 14:23:29 PDT 2008

when using Forest functional level = w2k3, Linked Value Replication is
available that prevents the replication of the complete group membership
when a member is added or removed. It had nothing to do with the number of
members. It had to do with the amount of data that was written into the
attribute (it is something like this). The number 5000 was a number of
members that was near the limit

to change the primary group, first select ANOTHER group and then click Set
As Primary group (or whatever the checkbox is called). For that yuo need
write permissions on the PrimaryGroupID attribute

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Chris" <Chris@discussions.microsoft.com> wrote in message
news:E6F89F25-7E9F-4E29-A5BC-D5734390E994@microsoft.com...
> We are using Windows 2003 AD and running 2003 native mode. I remember in
> Windows 2000 the group has limitation of 5000 users. What is it in
> Windows
> 2003? Does it have any limit? Since everyone will be in the Domain Users
> group? Is there a limit in Windows 2003 for this group? How about Domain
> Computers?
>
> another question is how to change user's primary group. By default, they
> are in Domain users. The "set primary group" is greyed out. Is it due to
> my
> permission? I don't need to change it but would like to know how to
> change
> it.
>
> Thanks.


Re: group member limitation, any more? by Jorge

Jorge
Wed Mar 26 15:12:19 PDT 2008

Just to clarify, the doc provided was to help in case you're wondering to
add large amount of security groups, users... between groups.
I think that when someone asks for limits like that, he/she should be aware
of other implications by doing that.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services