Active Directory Domain Performance is abysmal!

[Storever]

We have a somewhat large directory, ~500k users, 150k groups. Domain join and sync worked, albeit not without plenty of issues. However now, when attempting to add domain user or group permissions to a shared folder, the interface hangs for upwards of 20 minutes. Sometimes it will timeout and request that I reload the page, other times it will present the user or group that I searched for after 20 minutes. I'm guessing they didn't test this system with larger domains, and whatever they're using on the backend isn't performant enough at this scale. I have a ticket open with support, but I'm not holding my breath that they'll be able to understand the issue, let alone propose a solution.

[dolbyman]

Best to do the ldap sync with only a subset of the domain tree (branch/country/etc) ..otherwise I think that whatever enumerates the users in the background will just hopelessly choke on that many users.

I don't think QNAP was made for large scale enterprise