Active Directory authentication timeout?

Hi. We have an issue with migrating email boxes for some of our remote users in China office.

We are migrating with quest tool in the UK but the China users are failing with get-mailbox failures etc.

The China users are in their own child domain and all the DCs for this domain are all in China.

Whenever we do anything on the China domain from the UK the responses are very slow, e.g. just navigating through the domain in AD User & Computer is very slow.

I think the Quest tool is timing out and that a possible solution would be to have a DC for the China domain in our UK office. However, I need to prove that this is the case!

Is there any way of proving that the authentication is timing out?

Who is Participating?
Krzysztof PytkoSenior Active Directory EngineerCommented:
I've never tried this tool but from problem reading it might be related with WAN link saturation and its lag. Especially when you migrate mailboxes which have some size :)

I would suggest to place also additional DC for that domain in your site to be sure that authentication is resolved quickly and check then if it works correctly.

paulo999Author Commented:
That's what I was thinking too. The WAN link to China is actually a VPN over the internet so it's very laggy

I have added a new DC and will try some more migrations and report back.

Thanks for the input.
Krzysztof PytkoSenior Active Directory EngineerCommented:
You're welcome :)

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.