Solved

Browsing Active Directory on Windows Server 2012 is extremely slow

Posted on 2014-02-02
7
870 Views
Last Modified: 2014-02-03
I have a configuration with two servers. One is domain controller, the second is mail server.
The DC is running on MS Windows Server 2012 STD. Further it is running from an ESXi server (so it is virtual) and has 16GB of RAM. It has the following roles installed:

1. Domain Controller (Active Directory)
2. DNS
3. File server
4. IIS
5. Print server

When I try to edit details in Active Directory, it is responding very slow. For example opening an user account takes up to 30 seconds, just to display the settings. When I try to change some items, applying it is taking very long as well. Also, just opening AD takes a long time. Just for the record, this only occurs to AD, all the other configured services are normal and respond quickly.

The DNS server is pointing to itself (127.0.0.1) and when I check the performance it is very regular. I performed a performance check when I tried to open AD which did not show any peaks on Memory, I/O, CPU etc.

Has anyone seen this before, and more important: does anyone have any ideas that can point me to the solution?
0
Comment
Question by:dtwild
  • 3
  • 2
  • 2
7 Comments
 
LVL 5

Expert Comment

by:JurajUQU
ID: 39828740
It's an DNS issue. Don't set it as 127.0.0.0 as that's a loopback address but as the actuall IP of the server.
0
 

Author Comment

by:dtwild
ID: 39828763
I replaced the 127.0.0.1 with the actual IP address of the server.
Then I performed the following commands:

ipconfig /flushdns
ipconfig /registerdns

It seems to be only slower now though.
Is there anything else I might look into?
0
 
LVL 5

Expert Comment

by:JurajUQU
ID: 39828766
look at the event view for DNS. This is def a network issue/DNS setup misconfiguration.
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39829671
Using the loopback IP or the actual IP of the server will not change a thing, with regards to performance. Have you checked the processes that are running on your DC (CPU/RAM)? If you install RSAT (remote server admin tools) on another member server or a workstation do you experience the same slowness? Also check the disk access is it encountering a lot of read/writes? Use Performance Monitor to check this.

Will.
0
 

Author Comment

by:dtwild
ID: 39831114
Hi guys,

I checked the performance, but that looks all normal.
A funny thing though, I removed the antivirus which fixed it all. AD responds quick now..

I use Trend Micro Worry Free Business Security version 8.0. Do you have any ideas how to install the antivirus in such a way that it doesnt affect the performance? Obviously I like the server to be protected.

thanks!
0
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 500 total points
ID: 39831189
Well that makes perfect sense. Depending on the server you are installing the anti-virus software on there is usually some kind of exclusions that are recommended for performance issues.

Below is a link which outlines the recommended AV exclusions for domain controllers.
Domain Controller Exceptions

Will.
0
 

Author Closing Comment

by:dtwild
ID: 39831481
awesome, this fixed it. Thanks!
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question