Not able to query or update groups with more than 1500 members (4322326)

When using Get-QADMember or Set-QADMember PowerShell cmdlets and working directly with Active Roles, the following error may occur when the group contains more than 1500 members or the update is for more than 1500 members:

Request to change a multi-valued attribute has failed: attempted to add or remove too many attribute values. Not more than 1500 values can be added or removed from a multi-valued attribute within a single request.

STATUS

Active Roles has this limit set to prevent Active Roles clients from throttling network bandwidth.

WORKAROUND

Follow the steps below to increase the limit but keep in mind this may impact network performance.

1. Open the Active Roles MMC
2. Switch to Raw mode (View | Mode | Raw)
3. Navigate to the Services application configuration container (Configuration | Application Configuration | Services)
4. Right-click and choose Advanced Create
5. Create the object type of EDS-Application-Settings-Container with the name ActiveRoles Server
   Example:
   

   Click To See Full Image.

6. Open the newly created ActiveRoles Server container
7. Create an  object type of EDS-Applications-Setting with the name Multi Value Limit
   Example:
   

   Click To See Full Image.

8. Right-click the new object and select Advanced Properties
9. Edit the value of edsaExtensionAttribute1
10. Enter a desired value, such as 3000 (or anything beyond the largest group in your domain)
    Example:
    

    Click To See Full Image.