I am having an issue with Active Directory slowness. I have identified that our site users experience a 20-30 second delay in logging into the system. 

We have the AD setup to pull DC={sitename}, DC=org in the Base DN. I have to apply this high level because when I setup the DN Base as OU=Accounts, DC={sitename}, DC=org; some users will not have access because they belong to more than one OU. 

If I set up two instances, one with just the DCs and another that goes to the OU=Accounts; those who have the sublevel in the OU will not be able to access.

Does anyone have any suggetsions?

We also just set up SSL Cert and have followed the instructions. We are on v.6.6.0.10601