Article ID: 256641 - View products that this article applies to.
This article was previously published under Q256641
This article has been archived. It is offered "as is" and will no longer be updated.
The enumeration of users and groups for the following operation takes 10-30 minutes, depending on the number of users and groups (also known as security principals) in the specified domain, increases CPU usage on the primary domain controller of the specified domain by 70-90 percent until all security principals have been enumerated, and consumes 10-30 MB of network bandwidth depending on the size of the accounts database on the specified Windows NT 4.0-based domain:
This problem can occur because the Windows 2000-based computer obtains detailed information for every user in the Windows NT 4.0-based domain.
To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/260910/EN-US/ )How to Obtain the Latest Windows 2000 Service Pack
To work around this problem for domain membership, use command-line equivalents. Windows 2000-based domain computers use the Lightweight Directory Access Protocol (LDAP) and are less susceptible to this problem when a system policy is used to limit the number of objects returned to the object picker. For example, to add a domain user account to the local Administrators group on a member workstation or server in a domain, use the following command:
net localgroup groupnameaccountname /addIf command-line equivalents are not available or practical, manually type the appropriate accounts in the object picker dialog box, and then click OK to stop the enumeration of security principals between the client and server.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
This problem was first corrected in Windows 2000 Service Pack 1.
Article ID: 256641 - Last Review: October 20, 2013 - Revision: 3.3