Microsoft KB Archive/151962

= System Appears to Stop when Adding Users to Large Global Groups =

Article ID: 151962

Article Last Modified on 11/1/2006

-

APPLIES TO


 * Microsoft Windows NT Workstation 3.5
 * Microsoft Windows NT Workstation 3.51
 * Microsoft Windows NT Server 3.5
 * Microsoft Windows NT Server 3.51

-



This article was previously published under Q151962





SYMPTOMS
Whenever users are added to user-defined global groups, CPU use for the LSASS service is taxed to its limit, causing the domain controller to come to a halt for a few minutes. The user-defined global groups must contain thousands of users for this to occur. This issue has been encountered with user-defined global groups that contain 2,000 to 4,000 users.



CAUSE
When Netlogon calls the security account manager (SAM) to enumerate the global group's attributes, the SAM enumerates the attributes for each user in the global group, causing an extreme load on the domain controller.



STATUS
Microsoft has confirmed this to be a problem in Windows NT version 3.51. This problem was corrected in the latest Windows NT 3.51 U.S. Service Pack. For information on obtaining the Service Pack, query on the following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K

Additional query words: prodnt 3.50 3.51

Keywords: KB151962

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.