We recently starting testing the ADAudit tool and turned on some new auditing features in AD.
I have an LDAP Modify action in a custom program I've written that updates very large memberships for groups in AD (10,000+). It looks like it has started failing because of the auditing changes. This is the event description from the Directory Service Event Log.
While logging audit events for the following object, the directory service reached the maximum number of audit events that could be cached in memory at any given time. As a result of reaching this limit, the operation was aborted.
Maximum number of audit events that can be cached: 17000
Does anyone know how to change the maximum limit for this? I can find no information about it anywhere.