Active Directory Cookbook

4.16. Modifying the Default TTL Settings for Dynamic Objects

Tip

This recipe requires the Windows Server 2003 forest functional level.

Problem

You want to modify the minimum and default TTLs for dynamic objects.

Solution

In each solution below, I’ll show how to set the DynamicObjectDefaultTTL setting to 172800. Modifying the DynamicObjectMinTTL can be done in the same manner.

Using a graphical user interface

1. Open ADSI Edit.

2. If an entry for the Configuration naming context is not already displayed, do the following:

   1. Right-click on ADSI Edit in the right pane and click Connect to . . .

   2. Fill in the information for the naming context for your forest. Click on the Advanced button if you need to enter alternate credentials.

3. In the left pane, browse to the following path under the Configuration naming context: Services → Windows NT → Directory Service.

4. Right-click cn=Directory Service and select Properties.

5. Edit the msDS-Other-Settings attribute.

6. Click on DynamicObjectDefaultTTL=< xxxxx> and click Remove.

7. The attribute/value pair should have been populated in the “Value to add” field.

8. Edit the number part of the value to be 172800.

9. Click Add.

10. Click OK twice.

Using a command-line interface

The following ntdsutil command connects to <DomainControllerName>, displays the current values for the dynamic object TTL settings, sets the DynamicObjectDefaultTTL to 172800, commits the change, and displays the results:

> ntdsutil "config settings" connections "connect to server <DomainControllerName>"[RETURN] q "show ...