Article ID: 916558
Article Last Modified on 10/11/2007
APPLIES TO
- Microsoft Windows Server 2003, Standard Edition (32-bit x86)
- Microsoft Windows Server 2003, Enterprise Edition
- Microsoft Windows Server 2003, Standard x64 Edition
- Microsoft Windows Server 2003, Enterprise x64 Edition
- Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
SYMPTOMS
On a Microsoft Windows Server 2003-based computer, when you select objects from Active Directory, you notice that a delay of several seconds before the Object Search dialog box appears.
Note You do not experience such a delay on a Windows 2000-based computer or a Windows XP-based computer.
CAUSE
This behavior occurs because the object picker always calls a forest root domain controller to obtain a list of forest trusts in the current implementation of Windows Server 2003.
Windows Server 2003 forests support forest trusts. As an improvement to object picker in Windows Server 2003, object picker now lists the trusted forests. Therefore, you can query the trusted forests in the remote forest global catalogs for objects.
This delay occurs regardless of whether communication to the forest root domain is blocked or not. When the traffic is blocked, the delay may be more noticeable because the Windows Server 2003-based computer waits for time-outs to elapse.
WORKAROUND
To work around this problem, use one of the following methods:
- Tolerate the delay when you open the Object Search dialog box.
- Open the network communication for the Microsoft Local Security Authority (LSA) service to the forest root domain controllers.
STATUS
This behavior is by design.
MORE INFORMATION
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
832017 Service overview and network port requirements for the Windows Server system
Additional query words: objsel tree
Keywords: kbtshoot kbprb KB916558
