Users may notice a logon delay when authenticated against a Microsoft Read-Only Domain Controller

Version 1

    Problem

    Consider the following scenario:

    - You have Microsoft Active Directory sites set-up and in one or multiple sites a Microsoft Read-Only Domain Controller (RODC) is installed.
    - In the sites where the Microsoft RODC`s are located a delay in the logon process may occur.

    If logged on to a writeable domain controller, the logon will not have a delay.

     

    Cause

    The API`s, such as DSGetDCName, which are used to address the Active Directory called DSGetDCName require a writeable domain controller, which the RODC isn`t.

    Therefore, these API`s will try to locate a writeable domain controller which in turn will result in a delay in the logon process of the user. This behavior is by default of the Microsoft API`s.

     

    Solution

    This issue is resolved in RES Workspace Manager 2014 SR3.

    In case the Service Release is not (yet) available or in case the Service Release cannot be installed, a revision containing this update is available on request at RES Support.

    IMPORTANT: A revision contains multiple fixes. Only apply this revision when you are experiencing a specific problem. Unless you are severely impacted by this specific problem, RES Software recommends that you wait for the next service release containing these fixes.

    WORKAROUND:

    Replace the Microsoft Read-Only Domain Controller by a Microsoft Writeable Domain Controller.