Re: Group policy performance over the WAN
- From: SRG <SRG@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 9 Jun 2008 23:59:01 -0700
Okay after performing debug level breakdown I see a couple of areas of
contention. One is this.
USERENV(7e4.aa8) 16:14:25:717 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(7e4.aa8) 16:14:25:717 ReadGPExtensions: Rsop entry point not found
for dskquota.dll.
USERENV(7e4.aa8) 16:14:25:717 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(7e4.aa8) 16:14:25:717 ReadGPExtensions: Rsop entry point not found
for iedkcs32.dll.
USERENV(7e4.aa8) 16:14:25:717 ReadGPExtensions: Rsop entry point not found
for scecli.dll.
But everything I have read on this says that the authenticated users just
need read access to the OU the policy is applied which they already have that
right. Any advice on these?
Saw a long delay after this->
USERENV(8c0.9bc) 16:16:08:505 LoadProfileInfo: Failed to query central
profile with error 2
USERENV(8c0.9bc) 16:16:08:520 GetProfileType: ProfileFlags is 0
Also see this one a bit
USERENV(680.ba0) 21:20:32:648 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0x57.
I think that one is probably not going to be too tough to run down.
My primary concern I believe are those RSOP entry points not found.
any assistance is appreciated.
thx,
SRG
"Anthony [MVP]" wrote:
SRG,.
Do you have firewalling between the sites?
What errors do you have in the client logs?
You can use userenv debugging to see what is going on that takes so long:
http://support.microsoft.com/kb/221833
Anthony,
http://www.airdesk.co.uk
"SRG" <SRG@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:81165043-BBDB-4628-8CFD-8DED9E0E51AA@xxxxxxxxxxxxxxxx
Okay so remote sites have at least a T1 of bandwidth available to them.
Not
an option to put a domain controller at these remote locations. To get to
the desktop where one can login it takes about 10 minutes, to get to the
desktop after login takes about 10 minutes and to get to a fully
functional
desktop takes about another 10 minutes. I did a packet capture and the
login
process was about 50,000 packets. It was apparent there were a lot of
resends. I noted that the group policy and scripts are running from the
sysvol which means they are running via SMB and more so w/ core transfer
method at boot up. I realize it is common for SMB to cause ridiculous
resends over a WAN so I adjusted the sizreqbuffer and TCP Window Size on
the
domain controllers and file servers. The file servers do appear to have
better performance, the Domain Controllers do not. I did see some
fragmented
packets but not too many including everything 1400b and above is
fragmenting
due to overhead outside of my control. We are not able to set for the
group
policy to run in the background and we have quite a few policies that are
not
a choice, we must run them. I still think this is revolving around SMB
causing the group policy to resend and resend and resend. Any advice
anyone?
- Follow-Ups:
- Re: Group policy performance over the WAN
- From: Anthony [MVP]
- Re: Group policy performance over the WAN
- From: Florian Frommherz [MVP]
- Re: Group policy performance over the WAN
- References:
- Re: Group policy performance over the WAN
- From: Anthony [MVP]
- Re: Group policy performance over the WAN
- Prev by Date: Re: WMI Filters vs Virtual Machines
- Next by Date: Re: Group policy performance over the WAN
- Previous by thread: Re: Group policy performance over the WAN
- Next by thread: Re: Group policy performance over the WAN
- Index(es):
Relevant Pages
|
