Slow login for domain accounts using security groups after upgrade to SolarWinds Platform 2025.4 and above

3/11/2026 10:04 PM

3/11/2026 10:40 PM

Slow login for domain accounts using security groups (Login.aspx “Long request time”).

 

No impact to:

Polling

Alerts

Core platform services

If the unreachable domains are numerous or very slow to time out, login delays can be severe.

Network Performance Monitor

This is caused by an update to the SolarWinds AD login behavior in newer platform versions.

Starting in newer platform builds (including 2025.4.x+), the Windows/AD authentication path:

 

• Uses .NET DirectoryServices to ask AD for the full list of trusted domains/forests.
• For a user logging in via AD groups, it calls routines like CreateSidToDomainMapping to build a SID-to-domain map across all those trusts.
• For each trusted domain, it attempts LDAP/GC queries to resolve group membership.

If AD still contains legacy or unreachable trusted domains, SolarWinds will:

• Attempt to connect to those domains on every login, and
• Wait for each connection attempt to **time out**, generating:
  • **Can't connect to domain '<domain>': 0x8007203A The server is not operational.

This is why the issue only appears after the upgrade: previous versions of the SolarWinds Platform stuck to the local domain and did not aggressively query every trusted domain; the newer versions do.

There are two complementary ways to fix this:

A. Clean up AD trusts (recommended long-term)

Work with the AD team to:

• Identify any deprecated/unreachable domains or forests that still appear as trusted.
• Remove or properly retire those trusts in Active Directory.

Once AD no longer reports those domains, SolarWinds will stop trying to look them up.

B. Blacklist inoperable domains in SolarWinds

If removing AD trusts is not immediately possible, you can tell SolarWinds to skip specific unreachable domains.

1. Identify problematic domains from OrionWeb.log:
   • On the web server, open:
     C:\ProgramData\SolarWinds\Logs\Orion\OrionWeb.log
   • Search for recent entries:
     Can't connect to domain '<domain>': ... 0x8007203A: The server is not operational.
     text
   • List the domains that are known to be unused/legacy.
2. Add them to InoperableDomainsBlacklist (per THWACK guidance)
   Using SolarWinds Database Manager on the SolarWinds Platform DB:
   • Open Database Manager on a SolarWinds server.
   • Connect to the SolarWindsOrion database.
   • Open table WebSettings → New Query.
   • Run an INSERT similar to:
     

     -- Scripts are not supported under any SolarWinds support program or service.
     -- Scripts are provided AS IS without warranty of any kind. SolarWinds further
     -- disclaims all warranties including, without limitation, any implied warranties
     -- of merchantability or of fitness for a particular purpose. The risk arising
     -- out of the use or performance of the scripts and documentation stays with you.
     -- In no event shall SolarWinds or anyone else involved in the creation,
     -- production, or delivery of the scripts be liable for any damages whatsoever
     -- (including, without limitation, damages for loss of business profits, business
     -- interruption, loss of business information, or other pecuniary loss) arising
     -- out of the use of or inability to use the scripts or documentation.
     
     INSERT INTO WebSettings (SettingName, SettingValue)
     VALUES ('InoperableDomainsBlacklist', 'domain1;domain2;domain3')

     (Domains are separated with semicolons.)
   • If InoperableDomainsBlacklist already exists, update its SettingValue instead of inserting a new row.
3. Recycle IIS
   On the SolarWinds web server, run in a command prompt:
   iisreset
4. Test login again with an affected domain account and re-check OrionWeb.log:
   • The “Can’t connect to domain … 0x8007203A” messages for the blacklisted domains should no longer appear.
   • Login times should drop back to normal.
     
     

Source: https://thwack.solarwinds.com/discussion/151788/slow-login-domain-accounts-using-security-groups

Please note that Thwack is a community space where users may post any content as a suggestion or recommendations to you for your internal use. The information set forth herein may come from third-party websites or customers. SolarWinds is not liable for any downtime or any issue that may occur if you perform the following suggestions on the link provided. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.