Active Roles Console hangs when bringing up all User General Properties (4355278)

When opening a user's properties in the Active Roles Console, it hangs and may take a while (i.e. maybe a minute or longer) to show.

Upon investigating the Active Roles Debug log (ds.log), the following error is found:

This issue does not occur in the Active Roles Web Interface.

The delay occurs when retrieving user's Dial-in properties through the Active Roles Console (MMC), as the Console uses a specific DLL file to retrieve the information (iassdo.dll). The Web Interface uses a different method for retrieving Dial-In properties and does not exhibit the same behavior.

The Microsoft library DLL performs an RPC call to the Remote Registry service on the target domain controller, although the Dial-in properties themselves are retrieved using LDAP. The RPC call is performed over Named Pipes (TCP port 445) and that call will fail with the above error if the Remote Registry Service is disabled on the target Active Directory Domain Controller.

WORKAROUND

Enable the Remote Registry Service on the target Active Directory Domain Controller.

STATUS

Enhancement Request 492259 has been logged to change this requirement in a future version of Active Roles.