I would initially say take a peek at your deleted objects and see if you have a ton of stuff in there. You can use ldp or adfind to do this. Adfind is probably friendlier, you simply specify the -showdel option and look for objects with isdeleted=TRUE or look in the deleted objects container.
Note that by default, you need to have admin rights to see into the deleted objects container in Active Directory. Something like Adfind -b "cn=deleted objects,dc=domain,dc=com" -showdel Will dump all objects (and their attributes) of all tombstoned objects in the domain.com nc. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Schofield Sent: Friday, March 18, 2005 2:08 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] AD Database size questions. All the script does is either Adds users (a few at a time), updates one attribute or deletes the user. As far as a lot of transaction are concerned, the system was designed to hit a sql database first and determine what changes need to happen then go to AD and update information. There aren't a lot of transactions per say against AD. Thanks for the heads up. Steve ----- Original Message ----- From: "Bernard, Aric" <[EMAIL PROTECTED]> To: <ActiveDir@mail.activedir.org> Sent: Friday, March 18, 2005 1:19 PM Subject: RE: [ActiveDir] AD Database size questions. Not knowing what your script does for sure, keep in mind that as objects are deleted they are first 'tombstoned' before being purged. Therefore the space initially used by the object prior to being deleted is not completely available for reuse a portion of it will continue to be consumed by the tombstone object until the tombstone lifetime has expired an the object has purged. I had a customer that was testing scripts against their production AD and saw growth of the DIT to the tune of several GB over the course of a week. Their script created 200,000 user/contact objects in an OU and then processed them in several different ways. After the completion of the script, the results would be analyzed and then the objects would be deleted for another try... Regards, Aric -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Schofield Sent: Friday, March 18, 2005 10:02 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] AD Database size questions. Hi, I'm not sure if this is a problem but something seems not exactly right with the size of my AD database. AD has about 10,000 user id's and a few servers. The size of the AD database over the last few days has grown from 900 meg to 1.4 gig. We haven't added any a lot more objects to cause this type of growth. We do have a script that runs every 5 minutes that adds, updates, removes users that are used by a program that does LDAP look-ups. This is about the only thing because it runs so often I can contribute to it but not sure. There are no errors in the event log but the growth of 500 meg in a few days concerns me. I looked around and didn't find much pertaining to this subject. Any thoughts, suggestions on determining whitespace in the AD database? Steve Schofield [EMAIL PROTECTED] List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
