Dsa.msc takes forever to connect to a DC

[Guest pdx]

I have a small though important (to me and some customers) w2k3 R2 Sp2

domain. My problem is that running dsa.msc (or dssite.msc or apparently

anything that requires secure access to the dc) from member servers can take

forever. Running dsa.msc just now on a member server took 14 minutes for it

to open. There is no apparent related activity during the 14 minutes. If I

close ADUC after the initial connection finally happens and run dsa.msc it

opens quickly. If I try to open dssite.msc after the dsa.msc has finally

connected dssite.msc will open quickly. Its the first connection that seems

to take forever.

 

DcDiag and Netdiag on the DC don't show any problems. Event logs don't show

any problems. No apparent problems shown anywhere but obviously something is

wrong.

Anyone know how to log/troubleshoot what is going on during the interminable

wait for the tools to connect?

 

Thanks