puppetlabs/puppet — pull request #1992 by Iristyle (2013-10-11 19:35:52+00:00)
Title: (#22847) Restrict WMI group / user queries

(#22847) Restrict WMI group / user queries

- Querying win32_useraccount or win32_group on a domain can yield
a large request to AD for user / group objects, that may number in
the tens of thousands in large organizations
- This can cause a lot of stress on AD and the network to retrieve all
of these results, which are ultimately unused in the existing code
anyhow
- The solution involves simply restricting the queries to the local
machine