15.16. Setting the Default Quota for All Security Principals in a Partition

Tip

This recipe requires a Windows Server 2003 domain controller.

Problem

You want to set a default quota for all security principals.

Solution

Using a graphical user interface

  1. Open ADSI Edit.

  2. Connect to the partition you want to modify (has to be done on a per partition basis).

  3. In the left pane, expand the root of the partition.

  4. Right-click on cn=NTDS Quotas and select Properties.

  5. Set the msDS-DefaultQuota attribute to the number objects that security principals should be allowed to create if they are not assigned another quota.

  6. Click OK.

Using a command-line interface

Create an LDIF file called set_default_quota.ldf with the following contents:

dn: cn=NTDS Quotas,<PartitionDN>
changetype: modify
replace: msDs-DefaultQuota
msDs-DefaultQuota: <NumberOfObjects>
-

then run the following command:

> ldifde -v -i -f set_default_quota.ldf

Using VBScript

' This code sets the default quota for the specified partition
' ------ SCRIPT CONFIGURATION ------
strPartitionDN = "<PartitionDN>"        ' e.g. dc=rallencorp,dc=com
intDefaultQuota = <NumberOfObjects>     ' e.g. 10
' ------ END CONFIGURATION ---------

set objPart = GetObject("LDAP://cn=NTDS Quotas," & strPartitionDN )
objPart.Put "msDs-DefaultQuota", intDefaultQuota
objPart.SetInfo
WScript.Echo "Set the default quota for " & _
             strPartitionDN & " to " & intDefaultQuota

Discussion

The easiest way to apply a default quota to all of your users is to modify the msDS-DefaultQuota attribute on ...

Get Active Directory Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.