Admin Tip: Working with a Large Active Directory
When an Active Directory environment becomes large, the BlackBerry® Administration Service must scan through thousands of user objects to locate the user who is attempting to log in.
You can speed up this process by specifying the Global Catalog Search Base that the BlackBerry Administration Service will use when locating Active Directory Accounts. To do this, complete the following steps:
- In the BlackBerry Administration Service web console, expand BlackBerry Solution Topology -> BlackBerry Domain -> Component View.
- Click on BlackBerry Administration Service.
- On the right side, click on the Microsoft® Active Directory authentication tab.
- Click on Edit Component.
- For the Global Catalog search base textbox, enter a global catalog search base that applies to your Active Directory environment. The global catalog search base will be entered in the following format: OU=Users,DC=example,DC=com.
The example above references an organizational unit named Users and the DNS domain named example.com. When leveraging this search base, it will narrow down the search for users who are located in the Users organizational unit, while omitting users who are located in separate organizational units. The result is a faster, more efficient process.
Get more on the BlackBerry Administrative Service »
