Hi Eric This is happening in a production environment. I ran Joe's adfind utility for a while and was piping out to a file before I stopped it. The file was almost 400 meg. If you want to contact me off-list email me at [EMAIL PROTECTED] Let me know if you have another questions.
Thank you, Steve Schofield Microsoft MVP - ASP/ASP.NET ASPInsider Member - MCP http://www.orcsweb.com/ Powerful Web Hosting Solutions #1 in Service and Support ----- Original Message ----- From: "Eric Fleischman" <[EMAIL PROTECTED]> To: <ActiveDir@mail.activedir.org> Sent: Friday, March 18, 2005 4:21 PM Subject: RE: [ActiveDir] AD Database size questions. We didn't change TSL for existing deployments. I'd be interested in hearing more about this "issue." And since SP1 isn't RTM'd yet, I hope this unnamed someone hit it in a lab, not in production (unless they are in those beta programs where you run in production). :) ~Eric -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, March 18, 2005 12:05 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Database size questions. I had a conversation with someone this week (name withheld) who mentioned running into an issue with unexpected DIT growth due to the increase in the default tombstone period I believe in K3 SP1. It was especially relevant to integrated DNS entries. You may not be running SP1, but is there possibility of lots of new registrations getting added/deleted in DNS since you are integrated? Hopefully a deleted objects scan would show that off. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Schofield Sent: Friday, March 18, 2005 2:57 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] AD Database size questions. I'll also look at the delete objects. Thanks for the heads-up about the deleted objects. 1) OS/SP of the DCs Windows 2003 Standard all security hotfixes up-to-date 2) AD integrated DNS vs. non-AD integrated ADIntegrated DNS 3) # of domains 1 domain (2 DC's) 4) Is this happening on DCs in all domains or just one (if more than one domain) This is happening on both domain controllers. ----- Original Message ----- From: "Eric Fleischman" <[EMAIL PROTECTED]> To: <ActiveDir@mail.activedir.org> Sent: Friday, March 18, 2005 2:17 PM Subject: RE: [ActiveDir] AD Database size questions. Can you give us some insight in to the environment more generally: 1) OS/SP of the DCs 2) AD integrated DNS vs. non-AD integrated 3) # of domains 4) Is this happening on DCs in all domains or just one (if more than one domain) I'd probably start with the obvious....I'd inspect my CN=Deleted Objects container in the affected naming contexts, and see if there were new tombstones appearing. If so, well, you have the culprit. :) Just identify the creation/deletion mechanism and squash it. If there are no tombstones appearing over hours/days, we'd need to investigate a bit further. But if I were playing the odds, that's where I would start. ~Eric -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Schofield Sent: Friday, March 18, 2005 11:08 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] AD Database size questions. All the script does is either Adds users (a few at a time), updates one attribute or deletes the user. As far as a lot of transaction are concerned, the system was designed to hit a sql database first and determine what changes need to happen then go to AD and update information. There aren't a lot of transactions per say against AD. Thanks for the heads up. Steve ----- Original Message ----- From: "Bernard, Aric" <[EMAIL PROTECTED]> To: <ActiveDir@mail.activedir.org> Sent: Friday, March 18, 2005 1:19 PM Subject: RE: [ActiveDir] AD Database size questions. Not knowing what your script does for sure, keep in mind that as objects are deleted they are first 'tombstoned' before being purged. Therefore the space initially used by the object prior to being deleted is not completely available for reuse a portion of it will continue to be consumed by the tombstone object until the tombstone lifetime has expired an the object has purged. I had a customer that was testing scripts against their production AD and saw growth of the DIT to the tune of several GB over the course of a week. Their script created 200,000 user/contact objects in an OU and then processed them in several different ways. After the completion of the script, the results would be analyzed and then the objects would be deleted for another try... Regards, Aric -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Schofield Sent: Friday, March 18, 2005 10:02 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] AD Database size questions. Hi, I'm not sure if this is a problem but something seems not exactly right with the size of my AD database. AD has about 10,000 user id's and a few servers. The size of the AD database over the last few days has grown from 900 meg to 1.4 gig. We haven't added any a lot more objects to cause this type of growth. We do have a script that runs every 5 minutes that adds, updates, removes users that are used by a program that does LDAP look-ups. This is about the only thing because it runs so often I can contribute to it but not sure. There are no errors in the event log but the growth of 500 meg in a few days concerns me. I looked around and didn't find much pertaining to this subject. Any thoughts, suggestions on determining whitespace in the AD database? Steve Schofield [EMAIL PROTECTED] List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
