Return
-
Title
LDAP error 0xb. Administration Limit Exceeded when running an Initial Synchronization -
Description
When performing an Initial Synchronization, or performing a Full Resynchronization, the number of Failed Objects increases, and the following errors appear in the DSA.log:
Per attribute apply failed for object Error 0xe1000041. Apply of attribute with value(s) = failed. LDAP error 0xb. Administration Limit Exceeded (00002024: SvcErr: DSID-020807EF, problem 5008 (ADMIN_LIMIT_EXCEEDED), data -1069 ).
-
Cause
Windows Server 2008 DCs limit the LDAP returns to 5000. Environments with greater than 5000 objects in Sync scope will return this error. -
Resolution
There are two possible resolutions:
Resolution A:
As the synchronization runs, the number of Failed Objects decreases, and eventually all objects will be updated as expected.
Resolution B:
Override the hard-coded LDAP Limits that are set by default in Windows Server 2008.