Google is your friend. First result for active directory query returns only 1000 entries says- "There is a resultset size threshold on queries set at the domain level. You can view and change this with ntdsutil". I don't use or have access to active directories so further googling for ntdsutil is left an exercise for the reader :) At least it's not a problem with your script!