You may notice a delay when you select objects from Active Directory in Windows Server 2003 (916558)

The information in this article applies to:

Microsoft Windows Server 2003, Standard Edition
Microsoft Windows Server 2003, Enterprise Edition
Microsoft Windows Server 2003, Standard x64 Edition
Microsoft Windows Server 2003, Enterprise x64 Edition
Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems

SYMPTOMS

On a Microsoft Windows Server 2003-based computer, when you select objects from Active Directory, you notice that a delay of several seconds before the Object Search dialog box appears.

Note You do not experience such a delay on a Windows 2000-based computer or a Windows XP-based computer.

CAUSE

This behavior occurs because the object picker always calls a forest root domain controller to obtain a list of forest trusts in the current implementation of Windows Server 2003.

Windows Server 2003 forests support forest trusts. As an improvement to object picker in Windows Server 2003, object picker now lists the trusted forests. Therefore, you can query the trusted forests in the remote forest global catalogs for objects.

This delay occurs regardless of whether communication to the forest root domain is blocked or not. When the traffic is blocked, the delay may be more noticeable because the Windows Server 2003-based computer waits for time-outs to elapse.

WORKAROUND

To work around this problem, use one of the following methods:

Tolerate the delay when you open the Object Search dialog box.
Open the network communication for the Microsoft Local Security Authority (LSA) service to the forest root domain controllers.

STATUS

This behavior is by design.

MORE INFORMATION

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

832017 Service overview and network port requirements for the Windows Server system

Modification Type:	Major	Last Reviewed:	7/19/2006
Keywords:	kbtshoot kbprb KB916558 kbAudITPRO