What apps are running on the DC's? Have you checked to be sure that
replication is functioning correctly? Event logs clean?
Al
From: ActiveDir-owner (AT) mail (DOT) activedir.org
[mailto:ActiveDir-owner (AT) mail (DOT) activedir.org] Behalf McCann, Danny
Sent: Wednesday, July 13, 2005 4:33 AM
To: ActiveDir (AT) mail (DOT) activedir.org
Subject: [ActiveDir] Latency in Group membership
Hi
Recently our domain has began to show some latency in resolving group
membership.
Ie When someone is newly added to a group for access to a particular
resource it's now taking much longer than was the norm to resolve that
security. It's taking anything from 30mins to the next day to resolve
itself.
Logging off and back on again to clear the kerberos ticket doesn't
(usually) solve the problem.
I've tested AD and monitored some NTDS performance counters and
everything appears to be fine.
Network performance is good and there's no great loading on any of the
DC's.
I'd be grateful if anyone could help me out with some guidance on where
to look next.
Thanks
Danny