Re: slow iis 6.0 performance

From: Egbert Nierop \(MVP for IIS\) (egbert_nierop_at_nospam.invalid)
Date: 12/07/04


Date: Wed, 8 Dec 2004 00:57:22 +0100


"Param R." <pr@nospam.com> wrote in message
news:%23r$BZv80EHA.2624@TK2MSFTNGP11.phx.gbl...
> Where could I get a list of permissions that I need to set? The way I have
> done this is setup the domain user account on the DC. Then on the member
> web servers I added this user to IIS_WPG. This way that user should have
> the permissions required on the local web server? Wouldnt the website not
> load if the permissions were incorrect? Just a thought.

If the security tokens are not cached for a domain user we have a problem.
WHy is it not cached, possibly because your assumption that adding it to
IIS_WPG is sufficient. Unfortunately, IIS_WPG is given ---local--- security
rights on a -per server-base, so you should open domain security policy
editor and add IIS_WPG to

- logon as a batch job

I still do not recommend you to use a network account since this is not a
often used practice.

> thanks!
>
> "Egbert Nierop (MVP for IIS)" <egbert_nierop@nospam.invalid> wrote in
> message news:uQd%23GPu0EHA.2200@TK2MSFTNGP09.phx.gbl...
>> "Param R." <pr@nospam.com> wrote in message
>> news:%23RozMqj0EHA.2976@TK2MSFTNGP12.phx.gbl...
>>> Ben:
>>>
>>> 1. Format & Clean Install of 2003
>>> 2. CPU is not maxing out. It stays under 25%
>>> 3. 3x faster in response times on client. e.g. page which took 3 secs to
>>> load on iis5 now takes 10 secs.
>>> 4. There are no COM+ apps. All managed .net code.
>>> 5. SQL is configured for tcp/ip.
>>> 6. The application pool is running under a domain account - does it
>>> matter? If yes, why?
>>
>> Aha, you have set here a custom domain user?
>> If so, this user must have some priviliges such as for schannel. Can you
>> for the test, set this user to network service or even to SYSTEM?
>> If the performance is normal now, you should enable some priviliges (such
>> as logon as a batch/service) for that user using domain security policy
>> editor.
>>
>>> 7. To tune IIS, what counters do I need to monitor/lookout for?
>>
>> IIS 6 is fast by default. You only need to tune the process pool
>> parameters.
>>
>>> thanks!
>>>
>>> "Ben Strackany" <infoNOSPAM@developmentnow.nospam.com> wrote in message
>>> news:%23wS5%23cj0EHA.3416@TK2MSFTNGP09.phx.gbl...
>>>> Could be a lot of things.
>>>>
>>>> You might want to look into tuning IIS, looking at perfcounters (e.g.
>>>> context switching, cpu %, disk io).
>>>>
>>>> Maybe you have a COM+ application that's running as a server
>>>> application
>>>> instead of a library application? Maybe your database connection is
>>>> running
>>>> named pipes instead of TCP/IP? Maybe IIS is running as a domain account
>>>> instead of a local one?
>>>>
>>>> Hard to tell w/o knowing more about the pieces in your app.
>>>>
>>>> Is the CPU maxing out, or something else? When you say 3x faster you
>>>> mean
>>>> max requests/sec?
>>>>
>>>> When you upgraded to win2003, did you just upgrade the OS, or did you
>>>> do a
>>>> clean install?
>>>>
>>>> --
>>>> Ben Strackany
>>>> www.developmentnow.com
>>>>
>>>> dn
>>>>
>>>>
>>>> "Param R." <pr@nospam.com> wrote in message
>>>> news:%23Af2Xxa0EHA.3236@TK2MSFTNGP15.phx.gbl...
>>>>> Hi all, we recently upgraded our server to 2003 and everything is just
>>>>> slowww now. Same application running on same .net version on iis 5 was
>>>>> way
>>>>> faster. Any ideas? I read something about buffering in iis 6.0? I have
>>>>> buffering turned on under the IIS properties for the website. Does
>>>>> that
>>>>> help? What could be causing it to be slow?
>>>>>
>>>>> thanks!
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>
>



Relevant Pages

  • Re: slow iis 6.0 performance
    ... Where could I get a list of permissions that I need to set? ... done this is setup the domain user account on the DC. ... permissions required on the local web server? ... this user must have some priviliges such as for schannel. ...
    (microsoft.public.inetserver.iis)
  • Re: SHAREPOINT AND RWW ISSUES
    ... In WSS 2.0, when you create a Domain User account, the server adds it to SharePoint with 'Web Designer' rights. ... If you want to see or change these permissions for this group, go to 'Site Settings' / 'Go to Site Administration' / 'Manage Site Groups', click on 'Web Designer and then select 'Edit Site Group Permissions' ...
    (microsoft.public.windows.server.sbs)
  • Re: User Profiles
    ... the new hive to allow the domain user. ... In addition to the NTFS file permissions on the profile directories, ... are permissions contained in the registry hive stored in ntuser.dat (which ... New User Accounts May Not Be Permitted to Use User Profiles ...
    (microsoft.public.windows.server.active_directory)
  • Re: Default domain permissions
    ... BTW - the user account in question is a member of domain users ONLY. ... >> Checking everyone group and domain user group permissions on ... >> I have searched high and low for what the default domain user ... > Visit Topic URL to contact author (reg. ...
    (microsoft.public.win2000.security)
  • Re: Adding PC to Domain. What really happens
    ... your domain user may have rights that your workgroup user ... * PLEASE post all messages and replies in the newsgroups ... > Registry, files, permissions, local GPO's. ...
    (microsoft.public.windowsxp.network_web)