Applies to:  Domain Controllers on Windows 2008 and higher

Problem:
If customer run Windows Server 2012R2, Windows Server 2012, or Windows Sever 2008R2 server that has the Active Directory Domain Services (AD DS) or Active Directory Lightweight Directory Services (AD LDS) server role installed.  If the server receives a complex LDAP query that has a deeply nested filter, the impact maybe slow performance for AD DS or AD LDS and high CPU load. 

Centrify would like to refer to Microsoft Support link below and consider applying the patch:

https://support.microsoft.com/en-us/kb/2862304

NOTE: Centrify refer to the above link as a courtesy

Cause:
Refer to the Microsoft link provided above.
 

Resolution:
Refer to the Microsoft link provided above.