Kenneth-
Its not much help, but did you see this KB article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;281457 ? Do you
have individual user accounts in your ACLs rather than just groups? 


Darren

-----Original Message-----
From: Garello, Kenneth [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, July 22, 2003 12:32 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] slow guid resolution


Thanks you for your responses.

My account domains each have 2 DCs and each is GC
In my resource domain (DNS parent), I just have one GC

If I am performing a task on a resource computer (file server/non DC)
such as viewing directory ACL's does the GC of the domain that the
computer exists in get queried or the does the GC of the domain that the
user account exists in get queried.

All computers are connected by a high speed network ~100MB

Ken

-----Original Message-----
From: Roger Seielstad [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, July 22, 2003 10:34 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] slow guid resolution

I'd suspect the delay is caused by the system trying to convert the
SID's back to the account name, which is normal.

I'd expect that the delay is caused by too few Global Catalog servers,
but that's not necessarily the case. How are your GC's layed out?

--------------------------------------------------------------
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.


> -----Original Message-----
> From: Garello, Kenneth [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, July 22, 2003 10:21 AM
> To: '[EMAIL PROTECTED]'
> Subject: RE: [ActiveDir] slow guid resolution
> 
> 
> I'm just wondering if anyone experiences this same issue.  I
> never got any
> feedback.
> 
> Ken
> 
> -----Original Message-----
> From: Garello, Kenneth [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, July 02, 2003 3:57 PM
> To: '[EMAIL PROTECTED]'
> Subject: [ActiveDir] slow guid resolution
> 
> I have an active directory forest with 1 parent domain and
> two child domains
> which I upgraded from Winnt 4.0.
> 
> The parent and one of the child domains are running in native
> mode. All of
> my servers belong to the parent domain.
> When I view or modify permissions on a server directory, guid->name
> resolution for id's that are on the child domain take > 15 seconds.
> This is also happens when I view quotas.
> 
> Is this expected behavior?  If not, what should I look at?
> 
> I have done extensive research on ms support.
> 
> TIA
> 
> Ken
> List info   : http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive:
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
> 
> List info   : 
> http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive:
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
> 
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to