Re: (Trying to debug) Laptop Latency issues off of domain network

Tech-Archive recommends: Speed Up your PC by fixing your registry


"Adam Leinss" wrote:

> Well, it's a whole new ballgame then! Are you using roaming profiles?

We have roaming profiles switched on for users as per machine.
i.e. when they are on Desktops their roaming profiles are active. We have
made sure roaming profile is NOT enabled on the laptops (for obvious reasons).

> If so, check out this link: http://tinyurl.com/bre96. In this case,
> you can set the "Slow detect" policy which gives the remote user an
> option to use a local profile or wait for the roaming profile.

Nice... i will definately take a look at this.

> sounds like these devices wait forever for a roaming profile that they
> will never be able to get to because they are off the domain.

See that's what is confusing me! (given that i've already established above
user's roaming profile is not enabled for the laptops). At the logon dialogue
the user is trying to connect to a domain. i.e.:

| User Name: xxxx
| Password: *
| Log on to: <our domain>

passwords are cached once when the user logs in while on the network (intial
logon has to be while connected on the domain to cache the password).

What do u think about that? Could this be the reason it's causing the delay?
User details are *related* to some domain and even off of the domain the
laptop tries to obtain (obviously) the details... and in doing so has to wait
till it times out (before using the cached password.. etc...) ???

> Is it possible for these users to login locally to their devices?

Not currently. User accounts are all on the domain, AD + Kerberos whether
they logon to a Desktop or their personal Laptop (we don't want to create
seperate accounts to login to laptops). Plus they are Kerberos accounts,
infact the user logs in with Kerberos credentials not AD (we've not gotten
round to that yet). So, no i don't think the user logging in locally is an
option, except if we can do it with the same account & credentials.

ALSO (a big also). I believe most of the slow down is simply due to GPOs
that it's looking for. While on the domain this wouldn't be a problem,
however while off the domain and on some (weakly connected) network it might
feel that it *can* get these GPOs and then just sit there trying.

Is there any view/documentation out there (warning us) on (1) maintaining
laptops off of GPO policies and (2) AD/Kerberos offline authentication/login?


"Setting the 'Slow detect' policy... allowing the user to login locally..."
is this with the same account? i believe that is what we might be doing (and
i'm calling it something else... password chaching et all... I will look into
this and get back to the thread ASAP)

.

Relevant Pages

  • Re: XP and Roaming Profiles
    ... this message when you login with a roaming profile while off the network. ... Your domain admin account does not have a roaming profile, ... > but their domain profiles are not on the laptops just the domain admin. ...
    (microsoft.public.windowsxp.general)
  • Re: Profiles
    ... I'd also like it to be a roaming profile so ... Create and Configure User Accounts in Windows XP ... Documents and Settings is the directory that contains your user ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: User Accounts transfering
    ... Not using Roaming accounts these are local accounts ... > Copy and paste their roaming profile directories to the new server, ... > up roaming profile directories on the new box. ...
    (microsoft.public.windows.server.general)