Slow domain

[senchenkov_n]

Hi guys. I uses Windows authorization on WinccOA 3.15 on ULC UX.
I have over 50.000 domain groups.
when a user logs on to the system, a large amount of time passes before the user is identified by groups
And This operation is performed every time a domain user logs on
I wrote to config checkADinterval = 0, but if i restart project, domain groups will be update again about 40 hours. At this time, all users group are empty
If you log on again, operation will be repeated.

How i can use domain with so many groups?

[senchenkov_n]

When i use autostart, domain name in system dp was "NT", when i start project manually it dp was "mydomain"
Why system incorrectly identifies domain from account, who start pmon?

[leoknipp]

Can you please specify what is meant with "autostart"?
Is it starting the project via a Windows service?

If you are using the Windows service please check the account settings for the user starting the service.
Please note that you have to use a real user account and not one of the system accounts.

Best Regards
Leopold Knipp
Senior Support Specialist

[senchenkov_n]

Yes, i use start as windows service with delayed start, because automatic start not worked.

[senchenkov_n]

Start as Windows Service from domain user account can resolve incorrect domain problem. But what about update domain groups if checkADinterval=0?

[senchenkov_n]

At help for wincc 3.15 says "use local service account for start as windows service"
No information about domain account :dry:

[leoknipp]

Where did you find this information?
When looking at Installation --> Windows --> WinCC OA as service you can find the following information:
When using the pmon as a service it is to consider that only a defined user shall be used to start the service. The local system account must not be used due to the fact that access and permission problems might occur.

Best Regards
Leopold Knipp
Senior Support Specialist

[senchenkov_n]

I use russian help:

????????????? ?????? ????? ???????, ??? ?????? ???????????? ?? ????? ????????? ??????? ??????. ?? ????????? ?????? ??????????? ? ??????? ??????? Local System. ?????? ????? ???????????? ????????? ? ?????? -install.
???????:
-user NetworkService -install
?????? ??????? ?????? Network Service Account.
-user LocalService -install
?????? ??????? ?????? Local Service Account.

Sorry for my bad english, i try translate it:

Sets the service in such a way that the launch is performed on behalf of the specified account. By default, the service starts with the Local System account. This option is used in conjunction with the -install option.
Examples:
-user NetworkService -install
Specifies the Network Service Account.
-user LocalService -install
Specifies the Local Service Account.

At russian help no recomendation about real user account... :S

[leoknipp]

Then the russian documentation seems to be wrong. As I cannot read russian textes I cannot check if it is maybe already corrected in a newer version.
Please use the english one and change the service settings.

The config entry for the update of the user information is checkADAuthIntervall.
In your posting you have mentioned another one named checkADinterval.

Which entry are you using?

Best Regards
Leopold Knipp
Senior Support Specialist

[senchenkov_n]

I use checkADAuthIntervall, I made a mistake when write this post.
At every project start Domain Groups are still updated