Hi
Recently our domain has began to show some latency in resolving group membership.
Ie When someone is newly added to a group for access to a particular resource it's now taking much longer than was the norm to resolve that security. It's taking anything from 30mins to the next day to resolve itself.
Logging off and back on again to clear the kerberos ticket doesn't (usually) solve the problem.
I've tested AD and monitored some NTDS performance counters and everything appears to be fine.
Network performance is good and there's no great loading on any of the DC's.
I'd be grateful if anyone could help me out with some guidance on where to look next.
Thanks
Danny
