ARS 8.2.1 slow user and group searches

Hello,

we work since some months with Quest on this issue. A first workaround in my environment is to configure the machine.config file as we dont use any proxy but FW rules

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machie.config

add these lines:
<!-- The following section is to force use of Fiddler Classic for all applications, including those running in service         accounts -->  <system.net>
<defaultProxy>
<proxy autoDetect="false" bypassonlocal="false" proxyaddress="http://127.0.0.1:8888" usesystemdefault="false" />
</defaultProxy>
</system.net>

At the moment we still wait for Quest as they analyze a dump of AR process.

When there will be any update, I will let you know.

Michael

Hello,

we work since some months with Quest on this issue. A first workaround in my environment is to configure the machine.config file as we dont use any proxy but FW rules

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machie.config

add these lines:
<!-- The following section is to force use of Fiddler Classic for all applications, including those running in service         accounts -->  <system.net>
<defaultProxy>
<proxy autoDetect="false" bypassonlocal="false" proxyaddress="http://127.0.0.1:8888" usesystemdefault="false" />
</defaultProxy>
</system.net>

At the moment we still wait for Quest as they analyze a dump of AR process.

When there will be any update, I will let you know.

Michael

Tried that, but it didn't make a difference

Same result before and after

 measure-command {Get-QADGroupMember "the group" -DontUseDefaultIncludedProperties -proxy -service localhost} | select-object seconds

Seconds
-------
     37

Did you restart the server after changing the machine.config file?

Yes, it didn't fix the slowness, and it also breaks the functionality where we do need it.  We only need ARS to retrieve the user object guid, and really only when necessary for getting very specific exchange online properties for that person's mailbox (delegation for instance).

All of the other functionality that is being bundled seems to needlessly slow regular AD activities.  Having ARS iterate through hybrid identity group memberships, or any other entra id data, is really unhelpful for our use case.  At the very least we should be able to tell ARS only what we want it to retrieve, and ignore everything else.