All about Active Directory Quotas

Asked By 0 points N/A Posted on -
qa-featured

I have AD DS or Active Directory Domain Services. I want to learn more about how to implement limitations by using Active Directory Quotas. What are Active Directory Quotas and where should I apply it? How can I create quotas to a security principal? 

Thanks.
SHARE
Best Answer by JohnPaul19
Best Answer
Best Answer
Answered By 0 points N/A #99444

All about Active Directory Quotas

qa-featured

The limits on the number of objects that a security principal can own and create are called the Active Directory quotas. You can apply quotas for security principals on each directory partition that includes application partitions, domain partitions, and configuration partitions. Take note that the schema partitions are exempt from quota restrictions.

To create a quota to a security principal, you must use the directory services tools. Here are the command and required parameters for assigning a quota to a security principal:
 
  • dsadd quota –part <partition distinguished name> –qlimit <quotalimit> –acct <security principal>
 
Example: To set a quota limit of 10 on the security principal user object bsmith in the HelpDesk OU of the fabrikam.com directory partition, the command is:
 
  • dsadd quota -part dc=fabrikam,dc=com -qlimit 10 -acct cn=bsmith,ou=HelpDesk,dc=fabrikam,dc=com
 
To check that the quota was created successfully, open the Active Directory Users and Computers and navigate the NIDS Quotas container. That container should have an object titled FABRIKAM_bsmith (based from the example). 
Answered By 0 points N/A #99446

All about Active Directory Quotas

qa-featured

Quotas on Active directory refer to the number of objects that a security principal can own and is allowed to create. Your quotas are specified for security principals on each directory partition. The partitions may include application, domain and configuration partitions.

To be able to implement limits on the number of objects that a computer or a group of computers can create in a directory you may use AD and AD DS. Quotas are in the NTDS under the domain, application and configuration names to view the NTDS in the AD user's and computer it will mean snapping-in you first must enable Advanced Feature on the view menu.

Related Questions