Web Interface slow performance

Question

Hello -

It seems we've been experiencing some slow performance via the web interface lately. It was reported to me that it seem to have gotten bad within the last week. It happens more so when an object is clicked on after a search, but also on a regular search.
We are on version 3.7.12818.0. No major changes to our AD infrastructure, so I'm not sure where to start to troubleshoot.
We only have 1 server that caters to Adaxes.

Thank You

Comments

ports are good to go.
I sent the email. thanks!

---

Hello,

It looks like the delays are related to Office 365. Did you register an Office 365 Tenant in Adaxes? How long ago did you do that? Were there any changes related to Office 365 recently? For example, maybe you added a big number of users to Office 365 or migrated a bunch of mailboxes to the cloud?

Also, can you send us a copy of Adaxes Event log? For information on how to access it, see the following help article: http://www.adaxes.com/help/?ServiceAdmi ... ntLog.html.

---

Hi,

We upgraded to the current version 3/24/16.
I will find out about how many accounts were migrated from then until now, although I don't believe its a ton.
I will send the logs in the interim via email. Thank You.

---

As per the Helpdesk about 5 accounts were created and or migrated give or take.

---

Hi,

just checking in to see if anything was found via the logs.

Thanks

Answer 1

Hello,

Judging by the Event Log, there are indeed certain issues with connecting to your Office 365 tenant. Are you able to manage Office 365 properties of users with the help of Adaxes? Are you able to assign or revoke Office 365 licenses? It seems like Adaxes cannot perform any operations in Office 365 at all. Since Adaxes cannot normally connect to Office 365, time is wasted to fetch Office 365 properties of users, which causes the Web Interface performance issues.

Also, judging by the errors, when Adaxes fails to perform an operation in Office 365, this caused by the fact that the Azure AD Module for PowerShell receives malformed XML responses from Office 365. Do you have some sort of proxy or something like that in between the computer where Adaxes is installed and Office 365? It looks like there is some proxy that alters headers of HTTP responses from Office 365, which results in the ability to interpret those responses by the Azure PowerShell Module.

We recommend that you try removing all items from the Activity Scope of your Office 365 Tenant and checking whether this fixes the Web Interface issue.

Comments

Thank You.

I will take a further look.
Upon an initial look via Cloud Services in the Adaxes Console, the dirSync date reflects march 28, 2016. Does that indicate the last time the DirSync took place according to Adaxes ?
When I view the Synchronization Service Mgr, the last sync data reflects today.

We typically do not use proxies here, so don't believe there's one between O365 and the Adaxes server.

I just viewed some objects and tried to look at the O365 properties, and it said "the user doesn't have an office 365 account". So, there is a disconnect...this is weird b/c when it was upgraded I tested a few accounts and was able to see the properties. Not sure when and how that disconnect happen.

Also - reg the managed tenant, I've only listed my account there. Since the helpdesk uses Adaxes to manage etc, would their accounts need to be listed there as well? They have admin right within O365.

I've removed the items and the performance is definitely back to normal, i.e fast and as expected.

---

Hello,

The behavior that you describe clearly indicates that Adaxes cannot connect to Office 365. To help you troubleshooting the issue, on the computer where Adaxes is installed, can you launch the Microsoft Azure AD PowerShell Module and try establishing a connection to your Office 365 Tenant using the Connect-MsolService cmdlet and the credentials you specified when registering the tenant? Can you try the same from the computer that performs directory synchronization?

Also, alongside with XML errors, there are also Access Denied errors when connecting to Exchange Online. Can you check that the account you used when registering the tenant is assigned either to the Global Administrator or the User Management Administrator role in Office 365?

Also - reg the managed tenant, I've only listed my account there. Since the helpdesk uses Adaxes to manage etc, would their accounts need to be listed there as well? They have admin right within O365.

You need to assign a Security Role that allows Office 365 account management to your helpdesk guys. For more information, see Grant Permissions to Perform Office 365 Management Tasks. If they also need to perform certain operations with Exchange Online mailboxes, also have a look at Grant Permissions to Perform Exchange Tasks

---

Hi -

I was able to successfully connect via Azure AD Module from the Adaxes and from the same computer that performs Dir sync using the credentials used when registering the tenant.
The account being used is a Global Admin.
yes yes, HD already has the permission to write O365 properties.