We have a developer working on an application so HR can lock out users. By default, active directory sets all queries to return 1000 users. Since we have nearly 2000 users, this won’t work. Using ntdsutil, we can change this to the number we’d like. What are the consequences of this? We’re currently working on a test domain, but we want to be aware of any issues we may run into if we do this on our primary domain.