How to Configure Your IAS Server for a Very Large Number of Authentication Requests

ID: Q246118

The information in this article applies to:

Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Server

IMPORTANT: This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, view the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

SUMMARY

If the Internet Authentication Server (IAS) computer is receiving a very large number of authentication requests per second, you can improve throughput by increasing the number of concurrent authentication calls in progress at one time between the IAS server and the domain controller.

MORE INFORMATION

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys and Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. If you are running Windows NT, you should also update your Emergency Repair Disk (ERD).

To increase the number of concurrent authentication calls in progress at one time between the IAS server and the domain controller:

Start Registry Editor (Regedt32.exe).

Go to the following location in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters

NOTE: The above registry key is one path; it has been wrapped for readability.

On the Edit menu, click Add Key and add the following registry information:
```
   Value Name: MaxConcurrentApi
   Data Type:  REG_DWORD
   Value:      between 2 and 5 
```
Where 5 represents the heaviest loads.

If you assign too high a value to MaxConcurrentAPI, the IAS server could place an excessive load on the domain controller.

If you have a computer running Windows 2000 Advanced Server, you can use the Network Load Balancing component (previously known as WLBS) of Windows 2000 Advanced Server to distribute incoming access requests among multiple IAS servers. This helps your server perform better when network traffic is high.

Additional query words:

Keywords : kbenv kbnetwork kbtool
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbhowto