If you encounter any problems, use the following options and key areas for troubleshooting Active Roles.

Troubleshooting in logging

  • Windows Event Log: Active Roles Admin Service log.

  • Active Roles Configuration Center logging:

    • Administration Service: Click Log Viewer > Open.

    • ADSI Provider: Use it to log connections such as SPML, remote PowerShell, or remote Active Roles clients.

    • Active Roles Web Interface: Use it on any Active Roles server hosting the Web Interface.

    • Active Roles Console (MMC Interface): Use it to log local Console activity.

Troubleshooting in the Web Interface

  • In case of slow performance:

    • Check for connectivity issues between the Web Interface and the Active Roles server if they are on different hosts.

    • Check for defect 395064. For more information, see Knowledge Base Article 4369863 in the One Identity support portal.

  • Check Kerberos constrained delegation. For more information, see Knowledge Base Article 4336757 in the One Identity support portal.

  • In case of potential load balancer issues, consider that load balancers are not in the scope of One Identity Support. To confirm if this issue still persists, bypass the load balancer.

Troubleshooting domain connections

  • Check for any latency between the Active Roles host and the domain controller (DC) that Active Roles uses.

  • Change the currently active DC to another DC.

  • Check the DC Event Logs for any potential issues.