• State Not Answered
  • Replies 4 replies
  • Subscribers 66 subscribers
  • Views 294 views
  • Users 0 members are here
Options
Related

ARS 8.2.1 slow user and group searches

leejohnc
28 days ago

When searching for a user, opening an MU, OU, group member tab, ARS 8.2.1 is noticeably slower than it's predecessor while trying to enumerate the list.  It seems to be querying Entra ID attributes on users, though i'm not really sure.

Parents
  • 0 1 day ago

    Hello,

    we work since some months with Quest on this issue. A first workaround in my environment is to configure the machine.config file as we dont use any proxy but FW rules

    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machie.config

    add these lines:
    <!-- The following section is to force use of Fiddler Classic for all applications, including those running in service         accounts -->  <system.net>
    <defaultProxy>
    <proxy autoDetect="false" bypassonlocal="false" proxyaddress="http://127.0.0.1:8888" usesystemdefault="false" />
    </defaultProxy>
    </system.net>

    At the moment we still wait for Quest as they analyze a dump of AR process.

    When there will be any update, I will let you know.

    Michael

  • 0 1 day ago in reply to michael.junger_1237478612031

    Tried that, but it didn't make a difference

    Same result before and after

     measure-command {Get-QADGroupMember "the group" -DontUseDefaultIncludedProperties -proxy -service localhost} | select-object seconds

    Seconds
    -------
         37

  • 0 1 day ago in reply to leejohnc

    Did you restart the server after changing the machine.config file?

Reply Children
  • 0 1 day ago in reply to michael.junger_1237478612031

    Yes, it didn't fix the slowness, and it also breaks the functionality where we do need it.  We only need ARS to retrieve the user object guid, and really only when necessary for getting very specific exchange online properties for that person's mailbox (delegation for instance).

    All of the other functionality that is being bundled seems to needlessly slow regular AD activities.  Having ARS iterate through hybrid identity group memberships, or any other entra id data, is really unhelpful for our use case.  At the very least we should be able to tell ARS only what we want it to retrieve, and ignore everything else.