Joe, Thanks for the correction. That was indeed why the article mentioned in another post was not found.
The particular directories that I am referring to are primarily user's personal directories. Each directory has 1 group (domain administrators) and 1 user assigned in the ACL. It is the user resolution that takes >15 seconds. This issue and quota management is the only places that the problem is evident. It makes the quota management interface virtually useless. I will investigate the DNS possibility further. Thanks again all, Ken -----Original Message----- From: Joe [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 9:40 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] slow guid resolution First off, it is a SID translation not a GUID translation, retry your searches based on that as I'm sure that confused the matter. How many security principals do you have in the ACL chain? If it is greater than 6 or 7 you probably need to start looking at a better security structure utilizing groups instead of userids being directly added to ACL's. Also when you list group memberships on a member machine that has members from the other domains do you see a delay or errors? Finally as with almost all issues around AD that are based symptoms of going slow, are you sure your DNS system is all working properly? Have you done a network trace to see if DNS queries are being made that are being responded to with unknown name or possibly not being responded to? While you have the network sniffer out I would also look at the trace to see if there are any obvious delays between requests and responses between the client and the server(s). -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Garello, Kenneth Sent: Tuesday, July 22, 2003 10:21 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] slow guid resolution I'm just wondering if anyone experiences this same issue. I never got any feedback. Ken -----Original Message----- From: Garello, Kenneth [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 02, 2003 3:57 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] slow guid resolution I have an active directory forest with 1 parent domain and two child domains which I upgraded from Winnt 4.0. The parent and one of the child domains are running in native mode. All of my servers belong to the parent domain. When I view or modify permissions on a server directory, guid->name resolution for id's that are on the child domain take > 15 seconds. This is also happens when I view quotas. Is this expected behavior? If not, what should I look at? I have done extensive research on ms support. TIA Ken List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
