OU

We are currently restructuring our OU Model and would like to know if there
is any limitation on the number of levels of nesting that we can have. Also
what are the drawbacks of having nested OU;s?? I know group policy
troubleshooting becomes a problem..what else can be the problems?

Hello Mike,

There is no limit about OUs:
"The Active Directory database does not set limits on the number of objects
in a container, such as organizational units (OUs). You might experience
limits when you work with multiple thousands of objects. These limits are
configured to help provide a certain level of application or service availability"

From: http://technet.microsoft.com/en-us/l...01(WS.10).aspx

You should always work with KIS (keep it simple) in AD UC.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We are currently restructuring our OU Model and would like to know if
> there is any limitation on the number of levels of nesting that we can
> have. Also what are the drawbacks of having nested OU;s?? I know group
> policy troubleshooting becomes a problem..what else can be the
> problems?
>

There is no limit to the nesting, but at some point the Distinguished Names
become very long. I believe there is no limit to the length of Distinguished
Names, but some applications might have limits.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:. com...
> Hello Mike,
>
> There is no limit about OUs:
> "The Active Directory database does not set limits on the number of
> objects in a container, such as organizational units (OUs). You might
> experience limits when you work with multiple thousands of objects. These
> limits are configured to help provide a certain level of application or
> service availability"
>
> From: http://technet.microsoft.com/en-us/l...01(WS.10).aspx
>
> You should always work with KIS (keep it simple) in AD UC.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> We are currently restructuring our OU Model and would like to know if
>> there is any limitation on the number of levels of nesting that we can
>> have. Also what are the drawbacks of having nested OU;s?? I know group
>> policy troubleshooting becomes a problem..what else can be the
>> problems?
>>
>
>

"Richard Mueller [MVP]" <rlmueller-> wrote in message news:%23b$...
> There is no limit to the nesting, but at some point the Distinguished Names
> become very long. I believe there is no limit to the length of Distinguished
> Names, but some applications might have limits.
>
> --
> Richard Mueller
> MVP Directory Services
> Hilltop Lab - http://www.rlmueller.net
> --
>

Richard,

At one time I thought there was a 255 character OU name limit, as well as 255 child deep OU limit?



--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.

"Ace Fekay [MVP-DS, MCT]" <> wrote in message
news:%...
"Richard Mueller [MVP]" <rlmueller-> wrote in
message news:%23b$...
> There is no limit to the nesting, but at some point the Distinguished
> Names
> become very long. I believe there is no limit to the length of
> Distinguished
> Names, but some applications might have limits.
>
> --
> Richard Mueller
> MVP Directory Services
> Hilltop Lab - http://www.rlmueller.net
> --
>

Richard,

At one time I thought there was a 255 character OU name limit, as well as
255 child deep OU limit?



--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft PSS directly. Please check http://support.microsoft.com
for regional support phone numbers.
----------
I wouldn't be surprised, but I cannot find confirmation. The Schema
container shows that the cn and ou attributes are limited to 64 characters,
although the RDN (Name) attribute is limited to 255. I find no limit on any
DN attributes.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

"Richard Mueller [MVP]" <rlmueller-> wrote in message news:%...
>
> "Ace Fekay [MVP-DS, MCT]" <> wrote in message
> news:%...
> "Richard Mueller [MVP]" <rlmueller-> wrote in
> message news:%23b$...
>> There is no limit to the nesting, but at some point the Distinguished
>> Names
>> become very long. I believe there is no limit to the length of
>> Distinguished
>> Names, but some applications might have limits.
>>
>> --
>> Richard Mueller
>> MVP Directory Services
>> Hilltop Lab - http://www.rlmueller.net
>> --
>>
>
> Richard,
>
> At one time I thought there was a 255 character OU name limit, as well as
> 255 child deep OU limit?
>
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit among
> responding engineers, and to help others benefit from your resolution.
>
> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
> MCSA 2003/2000, MCSA Messaging 2003
> Microsoft Certified Trainer
> Microsoft MVP - Directory Services
>
> If you feel this is an urgent issue and require immediate assistance, please
> contact Microsoft PSS directly. Please check http://support.microsoft.com
> for regional support phone numbers.
> ----------
> I wouldn't be surprised, but I cannot find confirmation. The Schema
> container shows that the cn and ou attributes are limited to 64 characters,
> although the RDN (Name) attribute is limited to 255. I find no limit on any
> DN attributes.
>
> --
> Richard Mueller
> MVP Directory Services
> Hilltop Lab - http://www.rlmueller.net
> --
>
>


I couldn't find anything, either. I thought I had something on it from a previous email from early 2000's, but I can't seem to find it. My feeling is the best bet is to keep the name limited to 64 characters, and possibly the RDN and DN as well, just to keep it safe. :-)

Thanks, Richard!

Ace

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.