Google Postini Directory Sync Configuration Guide - Manual (Page 35)

Microsoft Active Directory 35
5. Add the following registry value:
Name: UserTokenTTL
Type: REG_DWORD
Data: 0
6. Quit Registry Editor.
7. Restart IIS.
Disable search entries limit
By default, Active Directory will only allow 1000 search entries. If your server has
more than this number of returned entries, you will need to override the default
1000 LDAP search size limit in Active Directory.
The size limit is kept as a LDAP policy. You can modify the LDAP policies using
Ntdsutil.exe tool in the Active Directory server.
1. Log in as an Active Directory admin.
2. In the Support Tools folder on the Windows 2000 installation CD-ROM,
launch launch the following program:
ntdsutil.exe.
By default, Ntdsutil.exe is installed in the System32 folder.
3. At the Ntdsutil.exe command prompt, type
LDAP policies
4. At the LDAP policy command prompt, type
connections