Active Directory Group with more then 500 members: Icon changes for group members


Weird..huh! When I was asked why a AD group that contains Computer Objects and it shows computer names as User Icons. Well, its true that group had more then 500 computer objects. We supposed to see computer icons in members tab. It doesn’t seem to affect it’s functionality.

Mystery! Love it. But it was an easy answer though. According to this MSKB: http://support.microsoft.com/?kbid=281923, Active Directory Users and Computer console shows gray haired User Icon for the group contains more than 500 members. Ha..Haa!!

As per MSKB-281923 article solution, I created the registry key and the value as following.

  1. Open Registry Editor
  2. Browse to this location: HKCU\Software\Policies\Microsoft\Windows\
  3. Created new sub key named “Directory UI
  4. Created a new key DWORD item named GroupMemberQueryLimit va under “Directory UI”
  5. Modified the value for GroupMemberQueryLimit to 5000
  6. Close the Registry Editor

Close and reopen the Active Directory Users and Computers console, open the group. There. Members Icon shows correctly.  Default limit for GroupMemberQueryLimit is 500. Now that makes sense.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s