Resolution
fact
Directory and Resource Administrator 6.40
fact
Directory and Resource Administrator 6.50
fact
Directory and Resource Administrator 6.60
symptom
Directory and Resource Administrator MMC interface takes more than a minute to enumerate a list of users, groups, contacts or computers.
cause
Computer accounts for the DRA servers were moved to an 'OU' where 'GPO's' did not allow the 'IUSR_servername' account local access to the DRA server machine.
fix
Directory and Resource Administrator 6.40
fact
Directory and Resource Administrator 6.50
fact
Directory and Resource Administrator 6.60
symptom
Directory and Resource Administrator MMC interface takes more than a minute to enumerate a list of users, groups, contacts or computers.
cause
Computer accounts for the DRA servers were moved to an 'OU' where 'GPO's' did not allow the 'IUSR_servername' account local access to the DRA server machine.
fix
To resolve this issue, give everyone full control to the following directory on the DRA server:
- C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys
Additional Information
Formerly known as NETIQKB9705