Hi, 

the resolution/translation of sid's used for security 
filtering on a GPO is extremly slow. It takes a while before the Scope of a 
selected GPO is visible and when it appears only the SID's are there i.e. 
only the numbers, not the name of the user or group. Rosolving the SID's to 
users takes another 5 minutes. 
Strangly enough, GPO's applicable to groups are not 
affected, i.e. groups are immediately resolved. Nevertheless GPOs
assigned to these groups do not apply.
Ad consists of 1 domain and three Domain Controllers (Windows
2003)which do all show this behaviour. Additionally there are about 20
NT4 BDCs in branch locations.
So it is mixed W2K3 domain, all 2003 Domain controllers are running SP1. 
I have just upgraded the GPMC to version 1.02 but no effect. 
I have no specific error messages in the event log. 
Translation of rights in Ad users and computer (for example) is fast.
 
Any idea's? 
Thanks