Jump to content
  • entries
  • comments
  • views

What is Active Directory Link Value Replication (LVR)?




If you still have a Windows 2000 domain controller, you should probably know that a group’s membership attribute is completely replicated between the domain controllers every time a change occurs. For example, even if you add or remove a single user to the group, domain controllers have to replicate the entire group and not only the change that you’ve made.

This creates unnecessary traffic and load on the domain controllers, but fortunately everything changed with Windows Server 2003 and above. The real problem of this behavior is when multiple administrators make changes at the same time to the same group. One administrator’s change will be probably overwritten by the change that other administrators make. The logic here is that the last writer wins.

If you have domain controllers that run Windows Server 2003, there is a new feature called LVR. Practically, individual values of a multi-value attribute of an Active Directory object (in our case, a group) are replicated separately. So multiple administrators can make changes to the membership of a group at the same time, assuming that they do not manipulate the same user. All changes are kept and the replication traffic is minimized, because Active Directory replicates only the changes and not the entire membership of the group.

The LVR feature works only if your forest is in the Server 2003 interim or native functional level. For Windows Server 2008 R2, your forest must be in the Server 2003 or Server 2008 or Server 2008 R2 functional level. Practically, if you have at least one domain controller with Windows 2000, the LVR will not work.



Recommended Comments

Ωραίο άρθρο! Με το LVR εκτός των άλλων ξεφεύγουμε και από το limitation των 5000 μελών σε ένα γκρουπ. Και λίγο background info: Το limitation αυτό προέρχεται από το max μεγεθος των δεδομένων που μπορούν να γίνουν replicated με μιας (10MB), και το ότι η μικρότερη μονάδα που μπορεί να γίνει replicated είναι ένα attribute. Έτσι λοιπόν αν το attribute γίνει μεγαλύτερο απο 10MB δεν μπορεί να συγχρονιστεί.

Link to comment
Add a comment...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...