Understanding Authorization Manager Store Limits

Applies To: Windows Server 2008


Authorization Manager is available for use in the following versions of Windows: Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows XP, Windows Vista, Windows 7, and Windows 8. It is deprecated as of Windows Server 2012 R2 and may be removed in subsequent versions.

You can configure each Authorization Manager store with several specific limits. This allows you to fine-tune the performance of Authorization Manager in your own environment. The default values are recommended unless you have a specific requirement.

You can configure limits on Authorization Rules and on LDAP query timeouts.

Authorization rules limits

You can choose to disable all authorization rules. If rules are enabled, you can specify a timeout value to limit the amount of time the system will wait for an authorization rule or business rule script to complete.

If you disable authorization rules using this setting, all clients using this Authorization Manager store are affected. Individual clients are also affected by the registry setting described in Understanding Authorization Rules and Business Rules.