Re: Slow authentication?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thanks for your response Eugene. However, the users are not accessing them
from the VPN, they are actually on the office network. Also, the workstations
are also members of the same domain.

"Eugene Gershnik" wrote:

> Kaz wrote:
> > Let's say I have a local domain controller for domain A in (for
> > expediency sake, say, New York). If I am already authenticated
> > (through this DC), and I try to access a network resource (which is
> > also in domain A) should I not be re-authenticated? Shouldn't I
> > already have a "ticket" that let's me access the resource instead of
> > re-authenticating me?
> > We are having issues where after logging in (to the network) users are
> > mapped to a file share (which exists on the same domain), but first
> > access to this share is extremely slow. I'm wondering if the users
> > are being re-authenticated or it's something else.
>
> This is a common problem for VPN users ;-)
> Most likely first access is slow because your computer needs to figure out
> how to find the target machine and how to talk to it. There will be some
> delay on server too but it is usually negligible compared to the network
> stuff.
> Then of course if your workstation is not a member of the domain it will
> most likely use NTLM rather than Kerberos which does require a separate
> roundtrip to DC from server.
> You can use a sniffer like network monitor to see which part of the equation
> gives you most trouble.
>
> --
> Eugene
> http://www.gershnik.com
>
>
>
>
.

Relevant Pages

  • Re: Cannot see computers by name
    ... but what happens in My Network Places that is ... the VPN when displaying records in My Network Places. ... It is the only way I can see that would match the apparent one-way NetBIOS ... Each remote LAN has about six workstations ...
    (microsoft.public.windows.server.sbs)
  • Re: Network application closes unexpectedly
    ... Try to disable autodisconnection feature first. ... configure the computer' network cards for half duplex. ... Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on ... > client workstations, the application is launched from the shared folder, ...
    (microsoft.public.win2000.networking)
  • Re: Network application closes unexpectedly
    ... Try to disable autodisconnection feature first. ... configure the computer' network cards for half duplex. ... Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on ... > client workstations, the application is launched from the shared folder, ...
    (microsoft.public.windows.server.networking)
  • Re: Cannot see computers by name
    ... NetBIOS is allowed over TCP at all workstations. ... The VPN box itself has ... but what happens in My Network Places that is ...
    (microsoft.public.windows.server.sbs)
  • Re: Possible inside security breach
    ... By default "authenticated users" can add up to ten workstations to a domain which ... means that ANYONE that know a logon/password for a domain account can add a ... ipsec policy to use for network communications restricted to only domain ... > who connect via a VPN. ...
    (microsoft.public.win2000.security)