Skip to content

Commit ee2dc3b

Browse files
authored
Update poor-performance-calling-lookup-functions.md
according to code review for LsaDbpLookupNamesBuildWorkList, the forest trust won't be used for isolated name lookup, as long as the trust has the attribute TRUST_ATTRIBUTE_FOREST_TRANSITIVE.
1 parent d061a19 commit ee2dc3b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

support/windows-server/active-directory/poor-performance-calling-lookup-functions.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ When calling the **LookupAccountName** or **LsaLookupNames** function to resolve
1616

1717
For example, poor performance might occur when using scripts or tools (such as *Cacls.exe*, *Xcacls.exe*, *icacls.exe*, *Dsacls.exe*, and *Subinacl.exe*) to call the functions to edit security settings.
1818

19-
The problem may show up when you have many trusted domains or forests (applies to both external and forest trusts), and/or some of these domains or forests are offline or slow to respond.
19+
The problem may show up when you have many trusted domains or external forest trusts, and/or some of these domains or forests are offline or slow to respond.
2020

2121
When the functions are called for an isolated name (the format is AccountName in contrast to domain\AccountName), a remote procedure call (RPC) is made to domain controllers on all trusted domains/forests. This issue might occur if the primary domain has many trust relationships with other domains/forests or if it's doing many lookups at a same time. For example, a script is configured to run at the startup of many clients, or many trusted domains/forests use the same script simultaneously.
2222

0 commit comments

Comments
 (0)