We have a performance problem in with active directory 2003: reverse lookup of object sids, particularly in ACLs and quotas, is very slow. Looking up user names in a long quota list may well take several hours; lookup of all users in an ACL can take 20s.
By contrast, performing a programmatic lookup (performing an LDAP search of objectSid) completes very fast.
What could be the source of this problem?