Skip to content

(#22847) Restrict WMI group / user queries#1992

Merged
joshcooper merged 1 commit intopuppetlabs:stablefrom
Iristyle:ticket/stable/22847-windows-adsi-restrict-wmi-queries
Oct 11, 2013
Merged

(#22847) Restrict WMI group / user queries#1992
joshcooper merged 1 commit intopuppetlabs:stablefrom
Iristyle:ticket/stable/22847-windows-adsi-restrict-wmi-queries

Conversation

@Iristyle
Copy link
Contributor

(#22847) Restrict WMI group / user queries

  • Querying win32_useraccount or win32_group on a domain can yield
    a large request to AD for user / group objects, that may number in
    the tens of thousands in large organizations
  • This can cause a lot of stress on AD and the network to retrieve all
    of these results, which are ultimately unused in the existing code
    anyhow
  • The solution involves simply restricting the queries to the local
    machine

 - Querying win32_useraccount or win32_group on a domain can yield
   a large request to AD for user / group objects, that may number in
   the tens of thousands in large organizations
 - This can cause a lot of stress on AD and the network to retrieve all
   of these results, which are ultimately unused in the existing code
   anyhow
 - The solution involves simply restricting the queries to the local
   machine
@puppetcla
Copy link

CLA signed by all contributors.

@joshcooper joshcooper merged commit f640dcb into puppetlabs:stable Oct 11, 2013
@joshcooper
Copy link
Contributor

Merged in 95d3151

@Iristyle Iristyle deleted the ticket/stable/22847-windows-adsi-restrict-wmi-queries branch March 1, 2016 01:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants