Dsa.msc takes forever to connect to a DC

pdx · Guest

I have a small though important (to me and some customers) w2k3 R2 Sp2
domain. My problem is that running dsa.msc (or dssite.msc or apparently
anything that requires secure access to the dc) from member servers can take
forever. Running dsa.msc just now on a member server took 14 minutes for it
to open. There is no apparent related activity during the 14 minutes. If I
close ADUC after the initial connection finally happens and run dsa.msc it
opens quickly. If I try to open dssite.msc after the dsa.msc has finally
connected dssite.msc will open quickly. Its the first connection that seems
to take forever.

DcDiag and Netdiag on the DC don't show any problems. Event logs don't show
any problems. No apparent problems shown anywhere but obviously something is
wrong.
Anyone know how to log/troubleshoot what is going on during the interminable
wait for the tools to connect?

Thanks