When executing scripts against the Active Roles Administration Service in powershell using a Canonical Name with creating items such as a new user or Organizational Unit take a long time in large environments where there are a large amount of Access Templates being applied.
Switch all commands and scripts to use the Distinguished Name instead of the Canonical Name value when specifying paths to objects in Active Directory. Active Roles will explicitly enumerate just the OU where the object is located eliminating enumeration for every Organizational Unit along the way.
Change the command from:
Using Canonical Name: new-QADGroup -Name 'Group1' -ParentContainer domain.corp/USCorp/1/2/3/4/Child OU
Change the command to:
Using Distinguished Name: new-QADGroup -Name 'Group1' -ParentContainer OU=1,OU=Corp1,DC=domain,DC=corp