If you worked an active directory performance issue, you might have noticed a number of ad performance counters for ntds and “directory services” objects including some atq related counters In this post, i provide a brief overview of atq performance counters, how to use them and discuss. Our current thinking is to set the values for “expensive” and “inefficient” both to a value of 0 then start with a search time threshold setting of 100 milliseconds (100 decimal / 64 hex) After the registry values are set on the dcs you want to analyze, you should start seeing 1644 events logged in the directory services log After you’ve collected enough data (say 30 minutes worth. Understanding atq performance counters, yet another twist in the world of tlas where he details
Scenario 2 dc supports ldap over ssl/tls a user sends a certificate on a session The server need to check for certificate revocation which may take some time.*
OPEN
