2099794 - Account information not recognized: The Active Directory Authentication plugin does not support the mapping of Distribution Lists. Please ensure that all mapped groups are valid Security Groups.

• Certain Active Directory (AD) users are presented with an error message stating "Account information not recognized: The Active Directory Authentication plugin does not support the mapping of Distribution Lists. Please ensure that all mapped groups are valid Security Groups." Others notice the entire system seems very unresponsive and the lsass.exe process appears to spike on the cms machine causing degraded performance.
  CMS trace shows 
• CMS Encountered error (The Active Directory Authentication plugin does not support the mapping of Distribution Lists. Please ensure that all mapped groups are valid Security Groups.) while trying to retrieve info for group: S-full-sid
• All users in the groups receiving this error were unable to login
• Important to note that we received a different error in the CMC  "invalid group name, cannot find group \ ADGROUPNAME", this error didn't appear in the CMS, the one abovce did. 

SAP BusinessObjects Business Intelligence Platform 4.2 or 4.3 all versions potentially

lsass.exe lsass WindowsAD secwinAD WinAD AD WIN SLOW performance XI XI3 XI31 XI3.1 Security Group SECURITY_GROUP DL DISTRIBUTION_LIST , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem