Re: Network logins take too long!
- From: Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de>
- Date: Tue, 24 Feb 2009 07:59:09 +0000 (UTC)
Hello William,
For DNS make sure that all machines use only domain internal DNS servers. Please post an unedited ipconfig /all from the DNS server and a problem machine. Are any of the DC/DNS server multihomed?
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Hello,
In the last few weeks we have been experiencing some very slow network
logons. When a user boots his desktop and logs
on to our AD it might take something between 20 seconds to 13 minutes
after
credentials input that his computer has
finished loading and is ready to be used. This happens to some client
sometimes. Not to all and not every time. Some
clients have not experienced any difficulties (so far).
We have all Dell environment. All desktops are Optiplex 755 or GX520
with
Intel or Broadcomm network adapters. AD
Domain Controller servers are two Dell PowerEdge2950 servers one with
Win2003R2 and one with Win2008SP1. Domain
funtional level is 2003.
As in almost all cases of slow network logins the culprit is DNS or
network
errors. Thats why I have been debugging
our DNS servers and Domain Controllers and I cannot find the reason
for this
there. No errors in the eventlogs.
replication seems to work OK. We have 2 AD integrated DNS servers on
the
Domain Controller machines. No client uses
any external DNS servers. All external queries are forwarded via
internal
DNS servers. Also Netdiag and Dcdiag give
clean results. I have also replaced our network swithes. We used to
use 1Gb
Hp Procurves but I went back to 100Mb
switches for debug reasons. No help there.
This mornign one user reported to me that his login took very long. I
checked his Windows XP event log and it was
clean. I also checked the DC's event log which his computer used for
authentication and it was clean. No errors.
However I noticed that there was 8 succesful audit in the servers
security
log for this user and this login. Time gap
between the first and last was 4 minites and 5 seconds. Is this
normal?
Events logged in DC were ID
540,540,540,538,538,538,540,538 in this order. First at 08:32:12 and
last
08:27:19.
What has changed is what I ask myself? Well before this started our
company
moved to a new location from 2 separate
offices. During the move one Win2000 DC was demoted using DCPROMO, one
site
and the corresponding subnet were deleted
from AD, our current site was renamed. All of these operations were
reported
successful and I gave time for the DC's
to replicate before the move. I gave about 16 hours. I have also
checked
that there's no references to the demoted DC
in DNS anymore.
So where to go from here? I don't have much ideas left anymore so hope
someone here can assist.
Thanks
William
.
- Follow-Ups:
- Re: Network logins take too long!
- From: William Stokes
- Re: Network logins take too long!
- References:
- Network logins take too long!
- From: William Stokes
- Network logins take too long!
- Prev by Date: Re: disable users while user is logged into the domain
- Next by Date: Re: Profile corruption
- Previous by thread: Network logins take too long!
- Next by thread: Re: Network logins take too long!
- Index(es):
Relevant Pages
|
