0

We have a performance problem in with active directory 2003: reverse lookup of object sids, particularly in ACLs and quotas, is very slow. Looking up user names in a long quota list may well take several hours; lookup of all users in an ACL can take 20s.

By contrast, performing a programmatic lookup (performing an LDAP search of objectSid) completes very fast.

What could be the source of this problem?

Improve this question
3
  • Is one of your domain controllers connected via WAN or is everything in LAN? Also: is this a single domain or are the lookups performed over a forest/domain trust?
    – leepfrog
    Apr 26, 2013 at 14:49
  • Is it consistent? Or is it only ACL's in ADUC, are there any patterns to this?
    – Mathias R. Jessen
    Apr 26, 2013 at 14:52
  • It's a single domain, on a LAN. I couldn't spot any pattern in it.
    – Martin v. Löwis
    Apr 26, 2013 at 22:41

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .