Expanding the capacity of a group by using XML

Use the ExpandWin2KCapacity procedure of the Managed Active Directory namespace to implement group nesting to circumvent the Windows 2000 Server limitation of 5000 members per group. This implementation handles two types of limits: users per organization and child organizations per organization.

After this call is made, repeated calls to DistributeGroupMemberships must be made until all of the affected groups have had their memberships redistributed. Capacity reduction is not implemented.

This procedure expects to be called with impersonate="1". The procedure impersonates the caller. The procedure must be run as an administrator of the organization.

Important

Implementation details require that this procedure be run when the group membership reaches 4000, rather than waiting to reach the 5000 member limit of Windows 2000 Server.

Example of a request that calls the ExpandWin2KCapacity procedure

<request>
  <procedure>
	<execute namespace="Managed Active Directory" procedure="ExpandWin2KCapacity"
		impersonate="1">
	<executeData>
		<organization>LDAP://ou=Hosting,dc=contoso01,dc=com</organization>
		<capacityType>UserN</capacityType>
		<multiplier>2</multiplier>
	</executeData>
	<after source="executeData" destination="data" />
	</execute> 	
  </procedure>
</request>

Input for ExpandWin2KCapacity

The following input is valid for this request:

LDAP path of the organization
Use the <organization> element to specify the Lightweight Directory Access Protocol (LDAP) path of the organization for which you want the capacity multiplier.
```
<organization>LDAP://LDAP path of the organization</organization>
```
Capacity type
Use the <capacityType> element to specify the capacity type of the group. Possible values are:
- UserN
  This type is used to limit the users per organization.
- ChildOrgN
  This type is used to limit the child organizations per organization.

<capacityType>UserN|ChildOrgN</capacityType>

Multiplier
Use the <multiplier> element to specify the multiplier to be used. The supplied multiplier must be a power of two (2, 4, 8, 16, up to 2048). If the supplied multiplier is not greater than the present multiplier, the call will fail.
```
<multiplier>multiplier number for the organization</multiplier>
```
Preferred domain controller (optional)
By using the <preferredDomainController> element, you can specify the domain controller that you want to use for this request. Using a single preferred domain controller eliminates replication delays that arise between multiple controllers.
```
<preferredDomainController>your domain controller</preferredDomainController>
```

Typical response for ExpandWin2KCapacity

The response to this procedure does not contain significant data.

Important

Although Active Directory is not case sensitive for elements such as the Lightweight Directory Access Protocol (LDAP) path, XML is case sensitive. To ensure that the procedure executes appropriately, specify all tags, elements, and data using uppercase and lowercase letters exactly as shown in the XML examples. For additional guidelines on how to use XML, see the Microsoft Web site (http://www.microsoft.com/).