Active Directory Cookbook

15.16. Setting the Default Quota for All Security Principals in a Partition

Tip

This recipe requires a Windows Server 2003 domain controller.

Problem

You want to set a default quota for all security principals.

Solution

Using a graphical user interface

1. Open ADSI Edit.

2. Connect to the partition you want to modify (has to be done on a per partition basis).

3. In the left pane, expand the root of the partition.

4. Right-click on cn=NTDS Quotas and select Properties.

5. Set the msDS-DefaultQuota attribute to the number objects that security principals should be allowed to create if they are not assigned another quota.

6. Click OK.

Using a command-line interface

Create an LDIF file called set_default_quota.ldf with the following contents:

dn: cn=NTDS Quotas,<PartitionDN>
changetype: modify
replace: msDs-DefaultQuota
msDs-DefaultQuota: <NumberOfObjects>
-

then run the following command:

> ldifde -v -i -f set_default_quota.ldf

Using VBScript

' This code sets the default quota for the specified partition
' ------ SCRIPT CONFIGURATION ------
strPartitionDN = "<PartitionDN>"        ' e.g. dc=rallencorp,dc=com
intDefaultQuota = <NumberOfObjects>     ' e.g. 10
' ------ END CONFIGURATION ---------

set objPart = GetObject("LDAP://cn=NTDS Quotas," & strPartitionDN )
objPart.Put "msDs-DefaultQuota", intDefaultQuota
objPart.SetInfo
WScript.Echo "Set the default quota for " & _
             strPartitionDN & " to " & intDefaultQuota

Discussion

The easiest way to apply a default quota to all of your users is to modify the msDS-DefaultQuota attribute on ...