The server does not support the requested critical extension (0x8007202c)

Question

Hello guys,
The sympton is the same as the one in "The
server does not support the requested critical extension." Exception.
I got the error in calling IDirectorySearch::GetNextRow. As I observe, the error is trigger when retrieving the another page of records. The LDAP path to connect is "GC://<FQDN_of_GC>". The search filter is (&(|(objectClass=group)(objectClass=msExchDynamicDistributionList))(mailnickname=*)).
There are about 100 thousands of group objects in the forest. So the answer in that thread does not help.
Any thoughts?
Thanks.
[email protected]

Answer 1

Hi Michael,
Thanks for your remind of the server is Windows 2008 R2. 
After deep research on this topic, there were a couple of possible causes. One was based on asking AD to do sorting on the results of the query. Our calls to AD do not do any sorting at all. The other I came to was a couple of pages that may help alleviate
the problem of groups in large AD environments. It has to deal with the temporary table size that Active Directory uses, with the tunable parameter MaxTempTableSize.
The articles as below are for your reference:
http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/95bfb95f-4e43-4dd8-ac3a-0c89d2cf528e
http://support.microsoft.com/kb/315071
http://msdn.microsoft.com/en-us/library/ms677927(VS.85).aspx
Besides, if the above is not the cause of our issue, there may be something wrong in the C# code. Since I just an AD engineer and not familiar with the C# code, I suggest you should involve one C# code engineer to work with us about this issue. After doing
many research, please add the class of the object when searching. For example, “DirectorySearcher ds = new DirectorySearcher(de, filter,class)”. I’m not sure if it’s correct, just a suggestion.
Hope to hear good news from you soon. Happy X'MAS day!
Best regards,
Bryan