PIM Manager settings · Settings > Hybrid AD & workloads
Server groups created per run
| Key | HybridAdServerAutoGroupMaxPerRun |
|---|---|
| Where | Settings > Hybrid AD & workloads > Hybrid Active Directory (PIM for AD) |
| Type | Number |
| Default | 50 groups |
| Feature | PIM for on-premises Active Directory · Pro Business, Pro Enterprise, Pro MSP |
What it does
How many server groups of an approved list the hybrid worker creates in one run. Allowed 1-1000. The worker runs about once an hour and goes on, run after run, until the approved list is done. It does not decide whether something is created: nothing is created without an approval.
When set
When set: after a SuperAdmin approved a list of new servers, each run creates at most this many of its groups. The page shows how many are created and about how long the rest takes at this number.
When blank or default
When blank / at the default: 50 groups per run. A list of 1,000 servers then takes about 20 runs (about 20 hours).
Risk and how to reverse it
A small number makes a long list slow; an approval is valid for 72 hours, and what is not created by then waits for a new approval. A large number creates many groups in one run, which loads the engine and Active Directory at once. It never creates more than the approved list. Reversible: change the number; it applies from the next run.
Requires
Pro (On-premises Active Directory feature) and a running hybrid worker. SuperAdmin to change. Only matters when OUs for new servers are named.
Recommended
Keep 50. Raise it for a large first roll-out so the list is done well within 72 hours, then set it back.
Related settings
- On-premises Active Directory (hybrid worker) FeatureGates.hybrid.ad
- AD OU (Day2Day Admins) NamingConventions.PathAdmins
- AD OU (High Priv Admins) NamingConventions.PathAdminsL0T0
- AD group marker HybridAdGroupMarker
- Pattern override HybridAdGroupPattern
- Cloud admin suffix HybridAdCloudSuffix
- AD admin suffix HybridAdAccountSuffix
- OU for new AD groups HybridAdGroupsOu
- Per-server group format HybridAdServerGroupFormat
- Shared server-admins group HybridAdServerAdminsGroup
- Never remove HybridAdProtectedMembers
- Groups per batch HybridAdSyncBatchSize
- Batches at once HybridAdSyncParallel
- Read activation end times as UTC HybridAdEndTimeAsUtc
- Server discovery: only these OUs HybridAdServerSearchOus
- Server discovery: OUs to leave out HybridAdServerExcludeOus
- Server discovery: last changed within (days) HybridAdServerActiveDays
- Server discovery: only names like HybridAdServerNameInclude
- Server discovery: never names like HybridAdServerNameExclude
- New servers in these OUs are offered for approval as one list HybridAdServerAutoGroupOus
- Clean-up: also look for old PIM groups in these OUs HybridAdCleanupOus
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack