Microsoft KB Archive/872750

= Performance improvements to help manage ISA Server 2000 in large enterprise environments =

Article ID: 872750

Article Last Modified on 6/14/2007

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2000 Standard Edition

-



Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry



SYMPTOMS
In large Microsoft Internet Security and Acceleration (ISA) Server 2000 Enterprise Edition environments that have centralized domain controllers, the following scenarios may occur.

Scenario 1
When you use the ISA Server Management snap-in to manage Server and Arrays from a computer in a remote domain, you can see only the first 1000 arrays. If the ISA Server Management snap-in is started on a computer in the same domain where all the ISA Server arrays are installed, you will see all the arrays.

Scenario 2
When you open the ISA Server Management snap-in and expand the Server and Arrays node, you may experience a significant delay and high CPU usage.

Scenario 3
When you run Automation scripts or applications that use the FPCArrays.GetContainingArray COM method, the scripts or applications run more slowly as the number of ISA Server arrays in the enterprise increases. You may also notice increased network traffic to retrieve the array object that is associated with the computer that the script is running on.

Scenario 4
The ISA Server Control service, the ISA Server Web Proxy service, and the ISA Server Firewall service may take a long time to start. This delay will increase with the number of arrays that are added to the enterprise. Network traffic and Lightweight Directory Access Protocol (LDAP) requests to domain controllers may increase.



CAUSE
In large ISA Server enterprise environments, the code that handled network traffic to domain controllers and that handled the enumeration of large number of arrays was inefficient. Performance would decrease when more than a 1000 arrays were installed in the enterprise. This hotfix resolves these issues.



Service pack information
For more information about how to obtain the latest ISA Server service pack, click the following article number to view the article in the Microsoft Knowledge Base:

313139 How to obtain the latest Internet Security and Acceleration Server 2000 service pack

Hotfix information
A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains this hotfix.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

http://go.microsoft.com/?linkid=6294451

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Prerequisites
You must install ISA Server Service Pack 2 (SP2) before you apply this hotfix.

File information
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.   Date         Time   Version            Size  File name -  31-Aug-2004  09:48  3.0.1200.402    222,712  Msfpc.dll 31-Aug-2004 09:48  3.0.1200.402  1,843,192  Msfpccom.dll 31-Aug-2004 09:48  3.0.1200.402  2,577,912  Msfpcsnp.dll The hotfix is also available for the French, German, Spanish, and Japanese versions of ISA Server.



How to enable this hotfix
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

After you install this hotfix, follow these steps to enable it:  Click Start, click Run, type regedit, and then click OK. Locate and then right-click the following registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fpc

 Point to New, and then click DWORD Value. Type ContainingArrayOptimizationsMask, and then press ENTER. Click ContainingArrayOptimizationsMask, and then right-click Modify.</li> In the Value Data box, type 0xff to enable the optimizations.</li> All ISA Server services must be restarted for the settings to take affect.</li></ol>

When you set the ContainingArrayOptimizationsMask value to 0xff, you enable the optimizations. If you change the value to 0x0, functionality reverts to the old behavior.

Note After you enable the optimizations, you cannot rename an array from the ISA Server Management snap-in. To rename an array, either use a script or revert to the old behavior.

Use the following script to determine the time that is required to retrieve the containing array. This script may help you determine whether you are experiencing &quot;Scenario 2&quot; and whether this hotfix has improved performance. Set ISA = CreateObject( &quot;FPCDS.Root&quot; ) Start = Timer Set ISAArray = ISA.Arrays.GetContainingArray Stop = Timer WScript.Echo &quot;It took &quot; & Stop - Start & &quot; seconds to execute - GetContainingArray.&quot; Use the following script to determine the time that is required to retrieve all arrays. This script may help you determine whether you are experiencing &quot;Scenario 3&quot; and whether this hotfix has improved performance. Set ISA = CreateObject( &quot;FPCDS.Root&quot; ) Start = Timer Set Arrays = ISA.Arrays Count = Arrays.Count Stop = Timer WScript.Echo &quot;It took &quot; & Stop - Start & &quot; seconds to enumerate &quot; & Count & &quot; arrays.&quot;

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in Microsoft Internet Security and Acceleration Server 2000.

Keywords: kbfix kbbug kbhotfixserver KB872750

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.