On our production servers the AdumError1.txt file has entries written to it 3 or 4 times a second containing the following

01-01-2014 05:29:55::370 GetUser
Returning groups from memory cache.

Is this normal behaviour to see so many entries??

We also get entries for user who no longer exist in the domain like the one below

10-03-2014 11:42:26::702 GetUser
The specified account does not exist. Resolving User:DOMAINIXF
at ADUM.Translate.NameToDN(String Name)
at ADUM.K2UserManager2.GetUser(String Name)

K2 is correct is that the user is not in the domain but where does it get the list of users to check from.  Are these individual users given rights in K2 or is it checking members within an NT group.  

Any help appreciated.

Regards

Stuart