Re: Access control list delay

You shouldn't be adding users to an ACL, you should be adding groups. It is possible you have so many users on the ACL it is taking that long to enumerate the list. This is bad because it means every access to that resources requires the same overhead. You should usually have a minimal number of ACEs in any given ACL.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Mugabi wrote:
Hello,

I am running a Windows Server 2003 system. I get a big delay whenever I want to add users to the acl and click 'add'- it takes about 1 minute or more before the window displays so that I can select or search for another user to add, even on the domain controllers.

What could be my problem?

Thanks,
.

Relevant Pages

  • Re: file security/authentication
    ... You did ACL the restricted part with a grant to the account ... Microsoft MVP (Windows Server: Security) ... I have one file that I want to use the local system ... I have turned off Anonymous access, ...
    (microsoft.public.inetserver.iis.security)
  • network filetering my range of IP addresses
    ... is there any way to easily setup an IP ACL on windows server 2003? ... I don't care for protocol or port for ...
    (microsoft.public.windows.server.security)
  • Re: ldap problem
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ...
    (microsoft.public.windows.server.active_directory)
  • Re: converting a domain local group in a universal group
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ... domain local group in a universal group? ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to find out who created an account in Active Directory
    ... Your one chance is by looking at the ACL for any telltale ACES and look at the owner listed on the SD. ... Joe Richards Microsoft MVP Windows Server Directory Services ... Chris wrote: ...
    (microsoft.public.win2000.active_directory)