Re: Active Directory: Very Slow Authentication

From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 09/28/04


Date: Tue, 28 Sep 2004 20:01:41 +0200

Mike,
We move forward with this :)
Hows is the SMB Signing Option. Is it still slow if you turn SMB Signing
off?

This option are located in Default Domain Policy and is enabled by default:
Computer Configuration\Windows Settings\Security Settings\Local
Policies\Security Options

-- 
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"Mike Davies" <miked_NOSPAM_@wangled.com> skrev i meddelandet 
news:OSeC11TpEHA.2636@TK2MSFTNGP09.phx.gbl...
> Hi Christoffer,
>
> The IP Addresses on all server is fixed with the DNS server pointing to 
> the
> domain controller.
>
> DNS server running on the domain controller only has one entry for the AD
> Zone, I've then setup forwarding to my previous DNS server for any
> unresolved queries.
>
> Michael
>
> "Chriss3 [MVP]" <noSpamHere@chrisse.se> wrote in message
> news:u$%23%23xLMpEHA.2948@TK2MSFTNGP11.phx.gbl...
>> Michael,
>> How is TCP/IP DNS Settings on the other three servers, only the DNS
> holding
>> the DNS zone for your Active Directory Domain should be in there, no
>> external or ISP, The DNS Server that host the AD zone is mostly the first
>> deployed domain controller.
>>
>> -- 
>> Regards
>> Christoffer Andersson
>> Microsoft MVP - Directory Services
>>
>> No email replies please - reply in the newsgroup
>> ------------------------------------------------
>> http://www.chrisse.se - Active Directory Tips
>>
>> "Mike Davies" <michael.davies@synsoft.co.uk> skrev i meddelandet
>> news:%23Q9yIDLpEHA.800@TK2MSFTNGP14.phx.gbl...
>> > Hi,
>> >
>> > I've got an AD domain running on Windows 2003 with 3 additional Windows
>> > 2000
>> > servers as members of that domain, it is a single domain on it's own.
>> >
>> > When I login to domain controller server it is very fast as expected 
>> > but
>> > if
>> > I login to any of the other three servers it takes approx 20-30 seconds
>> > before it accepts my username and password.  Then it takes a further
> 5-10
>> > mins while it says "Loading Personal Settings".
>> >
>> > Any ideas what could be causing this delay?  There doesn't seem to be
>> > anything related in the event log and all the systems are on the same
>> > sub-net connected to the same 100mb/s switch.
>> >
>> > Normal network traffic between the servers is very quick.
>> >
>> > Thanks
>> >
>> > Michael
>> >
>> >
>>
>>
>
> 


Relevant Pages

  • Re: dcpromo failed
    ... MVP - Directory Services ... Please no e-mails, any questions should be posted in the NewsGroup ... How about on the member server attempting to be promoted. ... An LDAP connection could not be established with the domain controller ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adding 2cond DC -- Meinolf Weber -- Continue....
    ... Could not find the domain controller for this domain. ... Server is not responding or is not considered suitable. ... Starting test: CrossRefValidation ... PASS - All the DNS entries for DC are registered on DNS server ...
    (microsoft.public.windows.server.general)
  • Re: NTDS Replication Event ID 1411
    ... If you don't have the support tools installed, install them from your server ... Run dcdiag, netdiag and repadmin in verbose mode. ... MVP - Directory Services ... principal name for the following domain controller. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Active Directory restore - recovery OK but fails on Directory Services start up
    ... What is the errors logged in the event viewer? ... > windows server 2003. ... Directory Services could not ... > the Active Directory settings from one domain controller ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adding 2cond DC -- Meinolf Weber -- Continue....
    ... I can See NETLOGON and SYSVOL on the New DC with Win 2003. ... Could not find the domain controller for this domain. ... Server is not responding or is not considered suitable. ... PASS - All the DNS entries for DC are registered on DNS server ...
    (microsoft.public.windows.server.general)

Loading