maybe this setting can help
For example, if a user logs on to a domain account and tries to access a DB2 database, DB2 goes to a domain controller to enumerate groups (including the Administrators group). You can force DB2 to always perform group lookup on the local computer by setting the registry variable DB2_GRP_LOOKUP=local and adding the domain accounts (or global groups) to the local group.