Consider increasing the LDAP Cache values from the current default value of 600 seconds to 14400 seconds, per TID7003298.
Unlike the previous LDAP recommendations, which have little negative impact, increasing the cache values significantly could cause changes in the LDAP source to be recognized much more slowly by the ZCM agent as it pulls old information from cache instead of from the new changed details.
This drawback is why this recommendation is listed last.