Have recently run into a strange, slower time for icon population upon adding or removing from an AD group. I have been on 10.1.2 for over a week without issue----I could add a user to an AD group, do a refresh and the icon would appear within a few seconds. Now, it is taking 15 minutes. Any ideas where I could look for clues? I've tested against other Domain Controllers to rule that out, I have reboot the Zen Server(s) and still the problem still exists. Thanks for the insight.