Windows Server 2003 increases the maximum numeric value that can be stored in a non-linked attribute (914036)


The information in this article applies to:

  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems

INTRODUCTION

The limit for the multi-values object in a non-linked attribute in the Active Directory directory service is defined by the operating system version and its forest functional level. Microsoft Windows Server 2003 increases the maximum numeric value that can be stored in a non-linked attribute.

The following table contains estimations of the maximum value that can be stored in a non-linked attribute in Microsoft Windows 2000 Server and in Microsoft Windows Server 2003.
Operating system versionForest functional level Value
Windows 2000 ServerMixed mode or native mode800
Windows Server 2003Windows 2000 Server (default) 800
Windows Server 2003Windows Server 2003 interim 1300
Windows Server 2003Windows Server 20031300
Note The actual value of a non-linked attribute varies depending on the length of characters and on the length of character sets in Active Directory.

MORE INFORMATION

If the value of a non-linked attribute is larger than 800 on a Windows Server 2003-based computer, error messages that are similar to the following are logged in the Directory Service event log:
Event Type: Error
Event Source: NTDS SDPROP
Event Category: (9)
Event ID: 2008
Description: Internal error: The security descriptor propagation task encountered an error while processing the following object. The propagation of security descriptors may not be possible until the problem is corrected. Object: <DN Path of non-linked attribute>
Additional Data Error value: -1112 [] Internal ID: 2080495
Note A "-1112" Jet error is logged on domain controllers that are not configured to run on a Windows Server 2003 interim forest functional level or on a higher level.
Event Type: Error
Event Source: NTDS SDPROP
Event Category: Internal Processing
Event ID: 2008
Description: Internal error: The security descriptor propagation task encountered an error while processing the following object. The propagation of security descriptors may not be possible until the problem is corrected. Object: <DN Path of non-linked attribute> Additional Data Error value: -1026 JET_errRecordTooBig, Record larger than maximum size Internal ID: 20903d5
Note If the attribute value limit is exceeded on a computer that uses the Windows Server 2003 interim functional level, a "-1026" Jet error is logged in the Directory Service event log.
Event ID: 4015
Source: DNS Type Error
Description: The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The event data contains the error. For more information, see Help and Support Center at http://support.microsoft.com. Data: 0000: 0000000b
Note The extended "0000000b" error code maps to the LDAP_ADMIN_LIMIT_EXCEEDED symbolic error. This symbolic error indicates that the administration limit on the server has been exceeded.

REFERENCES

For more information, visit the following Microsoft Web sites:

http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en-us/distrib/dsbg_dat_namy.asp

http://technet2.microsoft.com/WindowsServer/en/Library/1465d773-b763-45ec-b971-c23cdc27400e1033.mspx

Modification Type:MajorLast Reviewed:9/22/2006
Keywords:kbhowto kbinfo KB914036 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.