Update resolves a problem in which LDAP, Kerberos and DC locator responses are slow or time out with Windows

View products that this article applies to.

Symptoms

You notice that Lightweight Directory Access Protocol (LDAP) or Kerberos responses from the domain controller are delayed by 2 to 5 seconds. When the issue occurs, the Lsass.exe process CPU usage is low (even lower than usual).

Around the same time (but up to a 4-hour offset), you may receive Netlogon warning event 5807. This event indicates that many client IP addresses couldn’t be mapped to configured subnet definitions in Active Directory:As noted in the event, you may also receive many entries that have NO_CLIENT_SITE: in the Netlogon log when it is configured.

↑ Back to the top

Cause

These LDAP ping requests are unexpectedly exhausting all available threads for LDAP requests and Kerberos requests. The delayed response may cause clients to retry the LDAP ping (DC Locator) and Kerberos requests, and this makes the situation worse. For technical details, please visit the "More Information" section.

↑ Back to the top

Resolution

This update adds the "Specify address lookup behavior for DC locator ping" Group Policy setting for Windows 7 and Windows Server 2008 R2. After the update is installed, the policy setting is available in the following location:

Computer Configuration\Administrative Templates\System\Net Logon\DC Locator DNS Records

The Group Policy setting added by this update enables administrator to control how domain controllers perform address lookups. The policy setting must be applied to domain controllers. You can set three values for the Group Policy setting:

0 - Domain controllers will never perform address lookups.
1 - This is the default behavior. Domain controllers will perform an exhaustive address lookup to discover additional client IP addresses.
2 - Domain controllers will perform a fast, DNS-only address lookup to discover additional client IP addresses.

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix Download Available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website:

http://support.microsoft.com/contactus/?ws=support

Note The "Hotfix Download Available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Note This update is also applicable for Windows 7 to enable your to use Remote Server Administration Tools. The update should be installed on all domain controllers in all forests that response time is slow. Generally, they are the domain controllers in the forest root domains. You can also install the update on the computers that you use to manage group policies.

Prerequisites

To apply this hotfix, you must have Service Pack 1 installed. For more information about how to obtain a Windows 7 or Windows Server 2008 R2 service pack, click the following article number to view the article in the Microsoft Knowledge Base:

976932 Information about Service Pack 1 for Windows 7 and for Windows Server 2008 R2

Registry information

To use the update in this package, you do not have to make any changes to the registry.

Restart requirement

You may be prompted to restart the computer after you apply this hotfix.

Update replacement information

This update does not replace a previously released update.

File information

The global version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files

Windows 7 and Windows Server 2008 R2 file information notes

Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
Version Product Milestone Service branch
6.1.760
1.22xxx Windows 7 and Windows Server 2008 R2 SP1 LDR

Version	Product	Milestone	Service branch
6.1.760 1.22xxx	Windows 7 and Windows Server 2008 R2	SP1	LDR

For all supported x86-based versions of Windows 7

File name	File version	File size	Date	Time	Platform
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	03:07	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,632	27-Jan-2014	02:58	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:10	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,632	27-Jan-2014	03:01	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	03:08	Not applicable
Netmsg.dll.mui	6.1.7601.22582	207,360	27-Jan-2014	02:58	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	03:07	Not applicable
Netmsg.dll.mui	6.1.7601.22582	231,936	27-Jan-2014	02:58	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	03:08	Not applicable
Netmsg.dll.mui	6.1.7601.22582	247,808	27-Jan-2014	02:59	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	02:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,632	27-Jan-2014	02:09	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	03:10	Not applicable
Netmsg.dll.mui	6.1.7601.22582	226,816	27-Jan-2014	03:01	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	03:07	Not applicable
Netmsg.dll.mui	6.1.7601.22582	196,608	27-Jan-2014	02:58	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	03:12	Not applicable
Netmsg.dll.mui	6.1.7601.22582	231,936	27-Jan-2014	03:03	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	03:05	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,120	27-Jan-2014	02:56	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:11	Not applicable
Netmsg.dll.mui	6.1.7601.22582	215,040	27-Jan-2014	03:02	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	216,576	27-Jan-2014	03:01	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	5,120	27-Jan-2014	03:11	Not applicable
Netmsg.dll.mui	6.1.7601.22582	125,952	27-Jan-2014	03:02	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	5,120	27-Jan-2014	03:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	120,320	27-Jan-2014	03:00	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	03:05	Not applicable
Netmsg.dll.mui	6.1.7601.22582	193,024	27-Jan-2014	02:57	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	215,552	27-Jan-2014	03:00	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	217,088	27-Jan-2014	03:00	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:06	Not applicable
Netmsg.dll.mui	6.1.7601.22582	215,552	27-Jan-2014	02:57	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	03:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	225,792	27-Jan-2014	03:00	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	03:10	Not applicable
Netmsg.dll.mui	6.1.7601.22582	203,776	27-Jan-2014	03:01	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	03:11	Not applicable
Netmsg.dll.mui	6.1.7601.22582	199,168	27-Jan-2014	03:02	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	03:12	Not applicable
Netmsg.dll.mui	6.1.7601.22582	194,560	27-Jan-2014	03:03	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	4,608	27-Jan-2014	03:08	Not applicable
Netmsg.dll.mui	6.1.7601.22582	86,528	27-Jan-2014	03:00	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	4,608	27-Jan-2014	03:08	Not applicable
Netmsg.dll.mui	6.1.7601.22582	89,088	27-Jan-2014	02:59	Not applicable
Ntdsa.dll	6.1.7601.22582	45,568	27-Jan-2014	02:12	x86
Ntdsa.mof	Not applicable	227,765	05-Nov-2010	01:54	Not applicable
Ntdsai.dll	6.1.7601.22582	2,025,472	27-Jan-2014	02:12	x86
Netlogon.adml	Not applicable	63,245	27-Jan-2014	02:56	Not applicable
Netlogon.adml	Not applicable	48,320	27-Jan-2014	02:59	Not applicable
Netlogon.adml	Not applicable	44,781	27-Jan-2014	02:57	Not applicable
Netlogon.adml	Not applicable	49,434	27-Jan-2014	02:56	Not applicable
Netlogon.adml	Not applicable	83,244	27-Jan-2014	02:57	Not applicable
Netlogon.adml	Not applicable	40,173	27-Jan-2014	02:09	Not applicable
Netlogon.adml	Not applicable	47,831	27-Jan-2014	02:59	Not applicable
Netlogon.adml	Not applicable	44,523	27-Jan-2014	02:56	Not applicable
Netlogon.adml	Not applicable	51,799	27-Jan-2014	03:01	Not applicable
Netlogon.adml	Not applicable	53,878	27-Jan-2014	02:55	Not applicable
Netlogon.adml	Not applicable	51,709	27-Jan-2014	03:00	Not applicable
Netlogon.adml	Not applicable	48,668	27-Jan-2014	02:59	Not applicable
Netlogon.adml	Not applicable	50,348	27-Jan-2014	03:00	Not applicable
Netlogon.adml	Not applicable	45,192	27-Jan-2014	02:58	Not applicable
Netlogon.adml	Not applicable	43,853	27-Jan-2014	02:55	Not applicable
Netlogon.adml	Not applicable	45,070	27-Jan-2014	02:59	Not applicable
Netlogon.adml	Not applicable	48,317	27-Jan-2014	02:58	Not applicable
Netlogon.adml	Not applicable	47,859	27-Jan-2014	02:55	Not applicable
Netlogon.adml	Not applicable	45,685	27-Jan-2014	02:58	Not applicable
Netlogon.adml	Not applicable	69,027	27-Jan-2014	02:59	Not applicable
Netlogon.adml	Not applicable	45,983	27-Jan-2014	03:00	Not applicable
Netlogon.adml	Not applicable	43,974	27-Jan-2014	03:01	Not applicable
Netlogon.adml	Not applicable	36,178	27-Jan-2014	02:58	Not applicable
Netlogon.adml	Not applicable	37,216	27-Jan-2014	02:57	Not applicable
Netlogon.admx	Not applicable	18,356	16-Jan-2014	07:43	Not applicable
Netlogon.dll	6.1.7601.22582	572,416	27-Jan-2014	02:12	x86
Nlsvc.mof	Not applicable	2,873	10-Jun-2009	21:29	Not applicable

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name	File version	File size	Date	Time	Platform
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,632	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,632	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	207,360	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	231,936	27-Jan-2014	05:12	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	247,808	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	02:32	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,632	27-Jan-2014	02:31	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	226,816	27-Jan-2014	05:12	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	196,608	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	231,936	27-Jan-2014	05:12	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,120	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	215,040	27-Jan-2014	05:12	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	216,576	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	5,120	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	125,952	27-Jan-2014	05:13	Not applicable
Expand.exe.mui	6.1.7601.22582	5,120	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	120,320	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	193,024	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	215,552	27-Jan-2014	05:12	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	217,088	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	215,552	27-Jan-2014	05:12	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	225,792	27-Jan-2014	05:12	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	203,776	27-Jan-2014	05:13	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	199,168	27-Jan-2014	05:12	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	194,560	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	4,608	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	86,528	27-Jan-2014	05:11	Not applicable
Expand.exe.mui	6.1.7601.22582	4,608	27-Jan-2014	05:21	Not applicable
Netmsg.dll.mui	6.1.7601.22582	89,088	27-Jan-2014	05:13	Not applicable
Ntdsa.dll	6.1.7601.22582	68,608	27-Jan-2014	02:37	x64
Ntdsbmsg.dll.mui	6.1.7601.22582	19,968	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	58,486	27-Jan-2014	05:13	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	796,672	27-Jan-2014	05:06	Not applicable
Report.ad.xml	Not applicable	25,550	27-Jan-2014	04:53	Not applicable
Rules.ad.xml	Not applicable	8,368	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	24,064	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	61,684	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	880,640	27-Jan-2014	05:07	Not applicable
Report.ad.xml	Not applicable	24,069	27-Jan-2014	04:55	Not applicable
Rules.ad.xml	Not applicable	7,695	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	19,968	27-Jan-2014	02:32	Not applicable
Ntdsctrs.ini	Not applicable	54,286	27-Jan-2014	02:32	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	788,992	27-Jan-2014	02:31	Not applicable
Report.ad.xml	Not applicable	22,929	27-Jan-2014	02:32	Not applicable
Rules.ad.xml	Not applicable	7,255	27-Jan-2014	02:31	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	23,552	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	60,800	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	879,616	27-Jan-2014	05:06	Not applicable
Report.ad.xml	Not applicable	24,503	27-Jan-2014	04:55	Not applicable
Rules.ad.xml	Not applicable	8,031	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	24,064	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	61,502	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	893,952	27-Jan-2014	05:06	Not applicable
Report.ad.xml	Not applicable	24,821	27-Jan-2014	04:54	Not applicable
Rules.ad.xml	Not applicable	8,168	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	19,456	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	58,156	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	839,680	27-Jan-2014	05:07	Not applicable
Report.ad.xml	Not applicable	25,482	27-Jan-2014	04:55	Not applicable
Rules.ad.xml	Not applicable	8,284	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	20,992	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	58,590	27-Jan-2014	05:13	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	868,352	27-Jan-2014	05:06	Not applicable
Report.ad.xml	Not applicable	24,090	27-Jan-2014	04:54	Not applicable
Rules.ad.xml	Not applicable	8,177	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	12,800	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	40,580	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	562,176	27-Jan-2014	05:07	Not applicable
Report.ad.xml	Not applicable	23,027	27-Jan-2014	04:55	Not applicable
Rules.ad.xml	Not applicable	8,891	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	13,312	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	40,034	27-Jan-2014	05:13	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	535,040	27-Jan-2014	05:06	Not applicable
Report.ad.xml	Not applicable	23,790	27-Jan-2014	04:54	Not applicable
Rules.ad.xml	Not applicable	8,293	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	22,528	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	63,530	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	849,408	27-Jan-2014	05:06	Not applicable
Report.ad.xml	Not applicable	23,900	27-Jan-2014	04:54	Not applicable
Rules.ad.xml	Not applicable	7,839	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	21,504	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	58,990	27-Jan-2014	05:13	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	849,920	27-Jan-2014	05:06	Not applicable
Report.ad.xml	Not applicable	24,779	27-Jan-2014	04:53	Not applicable
Rules.ad.xml	Not applicable	8,332	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	22,016	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	57,834	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	843,264	27-Jan-2014	05:07	Not applicable
Report.ad.xml	Not applicable	24,297	27-Jan-2014	04:55	Not applicable
Rules.ad.xml	Not applicable	7,821	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	23,552	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	60,310	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	865,792	27-Jan-2014	05:07	Not applicable
Report.ad.xml	Not applicable	24,922	27-Jan-2014	04:55	Not applicable
Rules.ad.xml	Not applicable	8,115	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	20,992	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	57,258	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	823,296	27-Jan-2014	05:07	Not applicable
Report.ad.xml	Not applicable	27,906	27-Jan-2014	04:56	Not applicable
Rules.ad.xml	Not applicable	10,526	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	21,504	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	59,230	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	799,232	27-Jan-2014	05:07	Not applicable
Report.ad.xml	Not applicable	24,062	27-Jan-2014	04:55	Not applicable
Rules.ad.xml	Not applicable	7,623	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	18,944	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	54,780	27-Jan-2014	05:13	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	790,528	27-Jan-2014	05:06	Not applicable
Report.ad.xml	Not applicable	23,889	27-Jan-2014	04:55	Not applicable
Rules.ad.xml	Not applicable	7,635	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	9,728	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	34,782	27-Jan-2014	05:13	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	438,272	27-Jan-2014	05:06	Not applicable
Report.ad.xml	Not applicable	22,757	27-Jan-2014	04:54	Not applicable
Rules.ad.xml	Not applicable	7,024	27-Jan-2014	05:17	Not applicable
Ntdsbmsg.dll.mui	6.1.7601.22582	9,728	27-Jan-2014	05:19	Not applicable
Ntdsctrs.ini	Not applicable	36,464	27-Jan-2014	05:14	Not applicable
Ntdsmsg.dll.mui	6.1.7601.22582	446,464	27-Jan-2014	05:07	Not applicable
Report.ad.xml	Not applicable	22,781	27-Jan-2014	04:56	Not applicable
Rules.ad.xml	Not applicable	7,059	27-Jan-2014	05:17	Not applicable
Ntdsa.mof	Not applicable	227,765	05-Nov-2010	01:54	Not applicable
Ntdsai.dll	6.1.7601.22582	2,753,024	27-Jan-2014	02:37	x64
Netlogon.adml	Not applicable	63,245	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	48,320	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	44,781	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	49,434	27-Jan-2014	05:11	Not applicable
Netlogon.adml	Not applicable	83,244	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	40,173	27-Jan-2014	02:32	Not applicable
Netlogon.adml	Not applicable	47,831	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	44,523	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	51,799	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	53,878	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	51,709	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	48,668	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	50,348	27-Jan-2014	05:11	Not applicable
Netlogon.adml	Not applicable	45,192	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	43,853	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	45,070	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	48,317	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	47,859	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	45,685	27-Jan-2014	05:11	Not applicable
Netlogon.adml	Not applicable	69,027	27-Jan-2014	05:11	Not applicable
Netlogon.adml	Not applicable	45,983	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	43,974	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	36,178	27-Jan-2014	05:10	Not applicable
Netlogon.adml	Not applicable	37,216	27-Jan-2014	05:11	Not applicable
Netlogon.admx	Not applicable	18,356	16-Jan-2014	07:43	Not applicable
Netlogon.dll	6.1.7601.22582	705,536	27-Jan-2014	02:37	x64
Nlsvc.mof	Not applicable	2,873	10-Jun-2009	20:47	Not applicable
Netlogon.dll	6.1.7601.22582	572,416	27-Jan-2014	02:12	x86
Nlsvc.mof	Not applicable	2,873	10-Jun-2009	21:29	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	03:07	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,632	27-Jan-2014	02:58	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:10	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,632	27-Jan-2014	03:01	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	03:08	Not applicable
Netmsg.dll.mui	6.1.7601.22582	207,360	27-Jan-2014	02:58	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	03:07	Not applicable
Netmsg.dll.mui	6.1.7601.22582	231,936	27-Jan-2014	02:58	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	03:08	Not applicable
Netmsg.dll.mui	6.1.7601.22582	247,808	27-Jan-2014	02:59	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	02:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,632	27-Jan-2014	02:09	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	03:10	Not applicable
Netmsg.dll.mui	6.1.7601.22582	226,816	27-Jan-2014	03:01	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	03:07	Not applicable
Netmsg.dll.mui	6.1.7601.22582	196,608	27-Jan-2014	02:58	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	03:12	Not applicable
Netmsg.dll.mui	6.1.7601.22582	231,936	27-Jan-2014	03:03	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	03:05	Not applicable
Netmsg.dll.mui	6.1.7601.22582	197,120	27-Jan-2014	02:56	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:11	Not applicable
Netmsg.dll.mui	6.1.7601.22582	215,040	27-Jan-2014	03:02	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	216,576	27-Jan-2014	03:01	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	5,120	27-Jan-2014	03:11	Not applicable
Netmsg.dll.mui	6.1.7601.22582	125,952	27-Jan-2014	03:02	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	5,120	27-Jan-2014	03:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	120,320	27-Jan-2014	03:00	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,144	27-Jan-2014	03:05	Not applicable
Netmsg.dll.mui	6.1.7601.22582	193,024	27-Jan-2014	02:57	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	215,552	27-Jan-2014	03:00	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	217,088	27-Jan-2014	03:00	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,168	27-Jan-2014	03:06	Not applicable
Netmsg.dll.mui	6.1.7601.22582	215,552	27-Jan-2014	02:57	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	7,680	27-Jan-2014	03:09	Not applicable
Netmsg.dll.mui	6.1.7601.22582	225,792	27-Jan-2014	03:00	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	03:10	Not applicable
Netmsg.dll.mui	6.1.7601.22582	203,776	27-Jan-2014	03:01	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	03:11	Not applicable
Netmsg.dll.mui	6.1.7601.22582	199,168	27-Jan-2014	03:02	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	6,656	27-Jan-2014	03:12	Not applicable
Netmsg.dll.mui	6.1.7601.22582	194,560	27-Jan-2014	03:03	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	4,608	27-Jan-2014	03:08	Not applicable
Netmsg.dll.mui	6.1.7601.22582	86,528	27-Jan-2014	03:00	Not applicable
Bootfix.bin	Not applicable	1,024	09-Jul-2013	05:41	Not applicable
Expand.exe.mui	6.1.7601.22582	4,608	27-Jan-2014	03:08	Not applicable
Netmsg.dll.mui	6.1.7601.22582	89,088	27-Jan-2014	02:59	Not applicable

↑ Back to the top

Status

Microsoft has created an updated binary and policy settings to enable administrators to control how NetBT is used to process LDAP pings.

↑ Back to the top

More Information

When a domain controller receives a LDAP User Datagram Protocol (UDP) ping, the domain controller performs a client IP address lookup to find a matching subnet definition in Active Directory in order to provide the client with the corresponding logon site name.

If the domain controller cannot find a matching subnet for the client IP, it performs its own name resolution with the client's NetBIOS name for potentially finding a different IP having a subnet match.

The name resolution is performed in accordance with the domain controller's available resolution mechanism. In addition to DNS, WINS and NetBIOS may also be used, including broadcasts. According to the name resolution response or time-out, the related LDAP ping is locking one of the threads of the limited Active Thread Queue (ATQ) pool. Many of these LDAP pings over a longer time may constantly exhaust the ATQ pool. Because the same pool is required for regular LDAP and Kerberos requests, the domain controller becomes almost unavailable to users.

The domain controllers stop responding to the following workloads when the worker thread pool is exhausted, because they all share the same ATQ worker thread pool:

LDAP pings
LDAP queries
Kerberos

Failing those three core operations would cause many transitive errors on remote clients, applications, and domain controllers.

You may also observe the following symptoms:

Because the domain controller cannot perform workloads in this situation, CPU usage is lower than usual. (when Baseline Monitoring for comparison is in place)
The NTDS\ATQ Threads LDAP counter in Perfmon is equal to NTDS\ATQ Threads Total.
Domain controllers take about 2 seconds to service LDAP pings, as illustrated in the NETLOGON.LOG when debug logging is enabled by using "nltest /dbflag:0x2080FFFF." The log also contains frequent entries that contain "NO_CLIENT_SITE."

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

↑ Back to the top

Workaround

Before this update is installed, the following workarounds were identified as avoiding the problem:

Define subnets and site mapping for all client computers in your forest and also for client computers from a trusting forest in which a high rate of interactive user logon into your forest is initiated.
Extend the ATQ pool from the default MaxPoolThreads=4 per CPU core to a maximum of 10, in accordance with 315071 How to view and set LDAP policy in Active Directory by using Ntdsutil.exe.
Optimize the domain controller's name resolution. If WINS is required, use P-node, only avoiding broadcasts that have a higher response time-out. For more information, see Chapter 11 - NetBIOS over TCP/IP - Microsoft TechNet: Resources.

↑ Back to the top

Applies to:

↑ Back to the top

Keywords: kbautohotfix, kbqfe, kbhotfixserver, kbfix, kbsurveynew, kbexpertiseadvanced, kb

↑ Back to the top

Article Info

Article ID	:	2922852
Revision	:	1
Created on	:	1/7/2017
Published on	:	6/5/2014
Exists online	:	False
Views	:	222

Microsoft KB Archive Search

Update resolves a problem in which LDAP, Kerberos and DC locator responses are slow or time out with Windows

Symptoms

Cause

Resolution

Prerequisites

Registry information

Restart requirement

Update replacement information

File information

Windows 7 and Windows Server 2008 R2 file information notes

For all supported x86-based versions of Windows 7

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

Status

More Information

Workaround

Applies to: