Summary: This article contains step-by-step instructions on how to configure Active Directory domain controllers to increase the number of parallel sessions, and then configure Cayosoft Administrator to utilize all sessions for web action execution.
Applies to: Cayosoft Administrator 7.0.0 or later
ID: KB20200221-2
Overview
Cayosoft Administrator communicates with Active Directory services on the target Domain Controller (DC) via Active Directory Web Services (ADWS), which operates on the same DC. By default, the ADWS service allows up to five LDAP connections to be concurrently used with a single set of client credentials. This defaults to the creation of five PowerShell Host sessions within the Cayosoft Administration Service. Two of these sessions are allocated for interactive operations in the Admin Console and Web Portal, leaving three sessions available for executing web action rules. This means that up to three rules, including web actions, dynamic groups, automation, and reporting rules, can run concurrently. If all three sessions are occupied, web actions submitted by end-users are queued for execution until a session becomes available.
If you require more than five concurrent client requests to a single directory service instance, you can extend the limit through the ADWS service settings. Additionally, Cayosoft Administrator Service includes configuration settings that determine the maximum number of simultaneous sessions, aligned with the supported number of open sessions by ADWS.
Follow the instructions below to increase the number of Active Directory web actions processed in parallel.
Configuration instructions
Extend ADWS session limit on each Domain Controller configured in Cayosoft Administrator
If you want to increase the number of parallel sessions from 5 to 10, then set these values:
- On each Domain Controller, that is selected as target DC in Cayosoft Administrator Console > Active Directory configuration, navigate to %windir%\ADWS directory.
- Create a backup copy of the Microsoft.ActiveDirectory.WebServices.exe.config file.
- Open the Microsoft.ActiveDirectory.WebServices.exe.config file for editing.
-
Update the values for these settings:
- <add key="MaxPoolConnections" value="20" />
- <add key="MaxPercentageReservedConnections" value="80" />
- <add key="MaxConnectionsPerUser" value="10" />
- <add key="MaxEnumCtxsPerSession" value="20" />
- Save changes.
- Restart the ADWS service on each Domain Controller where you updated the settings.
Modify Session Management settings in the Cayosoft Administrator Console
- In the Administrator Console navigate to Home > Configuration > Support > Advanced Process Management.
- In the Maximum number of limited session hosts set 7. Set this setting to (MaxConnectionsPerUser - 3).
- In Maximum number of rules to run in parallel set 9. Set this setting to (MaxConnectionsPerUser - 1).
- Click Save changes.
- Restart the Cayosoft Administrator Service and reopen the Administrator Console.
As a result, Cayosoft Administrator can concurrently execute up to 7 web actions if they exclusively interact with Active Directory or Entra ID (ex. Azure AD). However, if a web action involves systems like Exchange Online, Exchange On-premises, SharePoint Online, Skype Server, or Skype Online, then only two such actions can run in parallel, constrained by hardcoded limitations imposed by Microsoft services.
- Always set the value of the Maximum number of rules to run in parallel lower than the MaxConnectionsPerUser in the Microsoft.ActiveDirectory.WebServices.exe.config file. Otherwise, navigating the Web Portal and running rule preview in the Administrator Console will be restricted.
- Each additional connection initiates a separate process within the Cayosoft Administrator Service, consuming a specific amount of RAM. Typically, such a process utilizes 250MB or more, depending on the number of enabled extensions and the size of the environment.
Related articles
Why Cayosoft Administrator has multiple processes running – Cayosoft Help Center
Comments
0 comments
Please sign in to leave a comment.