If you experience poor connector performance when using Active Roles Synchronization Service, enable multithreading for that connector. For more information, see Knowledge Base Article 4338969 in the One Identity support portal.
If you experience poor connector performance when using Active Roles Synchronization Service, enable multithreading for that connector. For more information, see Knowledge Base Article 4338969 in the One Identity support portal.
One Identity recommends hosting the Active Roles databases on a dedicated SQL Server instance. Do not share SQL Server resources with SQL-intensive applications (such as Quest Change Auditor), as it will negatively impact the performance of the Active Roles database.
Microsoft SQL is a resource-intensive application, and Microsoft SQL will use all available memory on its host server by default. To avoid Microsoft SQL using up all the available memory and negatively impacting the performance of the host server, limit the amount of RAM available to Microsoft SQL. However, also make sure that a minimum of 4 GB of RAM is always available for it. For more information, see How to: Set a Fixed Amount of Memory (SQL Server Management Studio) in the Microsoft SQL Server documentation.
For example, if the Windows host has 16 GB of RAM allocated, then a dedicated SQL instance on a dedicated SQL Server host must be limited to 12 GB.
IMPORTANT: When authenticating to Microsoft SQL Server via Windows Authentication, ensure that the necessary Service Principal Names (SPNs) are configured and delegated.
To ensure that there are no errors with Windows Authentication, enable Kerberos logging on the Active Roles Administration Service and Active Roles Web Interface hosts. For more information, see How to enable Kerberos event logging in the Microsoft Windows Server documentation.
To configure the necessary SQL Server SPNs, see Manual SPN registration in the Microsoft SQL Server documentation. After you configured the SPNs, add the delegations in the Delegation tab of the Active Directory Users and Computers application.
If you experience performance differences among multiple Active Roles clients when working with Active Roles Virtual Attributes—compared to similar operations that only reference system-provided Active Directory attributes—performing maintenance on SQL indexes might help improving performance. For more information, see Knowledge Base Article 4334101 in the One Identity support portal.
Consider the following Windows Server settings when using Active Roles:
By default, Windows Server uses the Balanced power plan that balances power consumption and performance. If performance is your primary focus, change the power plan to High Performance under Control Panel > All Control Panel Items > Power Options.
If set too low, the Windows page file settings on the host server might negatively impact performance. Set the minimum page file size to the amount of installed RAM in the host server, and set the maximum size not more than three times the amount of installed RAM. For more information, see How to determine the appropriate page file size for 64-bit versions of Windows in the Microsoft Windows documentation.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center