Re: Long time taking for Single user to logon

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Have them try and logon to a different workstation. If the problem goes
away (Which I'm guessing it will) you have a workstation issue and not a
user issue.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Jaywant" <Jaywant@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8668664D-156D-4DAE-9377-F3A6403CA5E1@xxxxxxxxxxxxxxxx


Hi Paul,

This issue appears for only one user however there are some 30 users at
the
site for whom these groups are working fine.

I hav DFL as Windows 2000 native
and FFL as Windows 2000.

120 remote sites connected with VPN. Each site have its DC and DNS acting
as
GC.








--
Jaywant Kamble.



"Paul Bergson [MVP-DS]" wrote:

I would agree with you Meinolf, but I would wonder why the user wouldn't
have access to a GC? Jaywant can you describe your environment? DC's,
DNS
server's and GC's. Topology (Sites).

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d98908cc3281a9354166@xxxxxxxxxxxxxxxxxxxxxxx
Hello Jaywant,

See here about group scopes and if it doesn't apply don't use the
universal groups. Then check again with the logon.
http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Hi Meinolf,

User is member of two Universal - Security Group and four Global -
Security group.

"Meinolf Weber [MVP-DS]" wrote:

Hello Jaywant,

Any chance that the user is member of an Universal Group? This kind
of group requires contact to a Global catalog server for logon.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Hi there,

I am having an issue with user account/group membership.

I have a remote site where 30-40 users work via VPN/Firewall.

All users login to the domain normally but for a single user it take
more
than 15 mnutes. Also user cant access any share. It happens with
this
user
only. There are number of group for which user is member of, however
I
have
observed that when I add any of four groups say
ab_all
cd_all
ef_all and gh_all. Issue starts.
If I remove these groups from user's member of list, it starts
working
normally.
Steps I performed for troublehsooting this.

1. I have created new user account with user's name by renaming his
old
account.
2. Asked user to login from some diffrent system from the same site.
3. Checked with some other user to login from his system, other
users
login
normally but this user cant.
4. I have enabled userenv.log for debugging. Found log as below.
Userenv.log say as.
USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: critical
section
initialized
USERENV(478.47c) 11:31:29:531 CSyncManager::Initialize: critical
section
initialized
USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: registry key
Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
USERENV(478.47c) 11:31:29:546 CUserProfile::Initialize: Proccessing
S-1-5-21-3941269898-4162109257-75492585-500
USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock
<S-1-5-21-3941269898-4162109257-75492585-500>
USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: No existing
entry found
USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: New entry
created
USERENV(478.47c) 11:31:29:546 CHashTable::HashAdd:
S-1-5-21-3941269898-4162109257-75492585-500 added in bucket 2
USERENV(478.47c) 11:31:29:562 CUserProfile::CleanupUserProfile:
Enter
critical section.
USERENV(478.47c) 11:31:29:562 CUserProfile::GetRefCountAndFlags: Ref
count
is 0, state is 00000100
USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock
<S-1-5-21-3941269898-4162109257-75492585-500>
USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock: Lock released
USERENV(478.47c) 11:31:29:562 CHashTable::HashDelete:
S-1-5-21-3941269898-4162109257-75492585-500 deleted
USERENV(478.47c) 11:31:29:578 CSyncManager::LeaveLock: Lock deleted
USERENV(478.47c) 11:31:29:578 CUserProfile::CleanupUserProfile:
Leave
critical section
USERENV(478.47c) 11:31:29:578 CUserProfile::Initialize: Proccessing
S-1-5-21-3941269898-4162109257-75492585-1003
USERENV(478.47c) 11:31:29:578 CSyncManager::EnterLock
<S-1-5-21-3941269898-4162109257-75492585-1003>
USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: No existing
entry found
USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: New entry
created
USERENV(478.47c) 11:31:29:593 CHashTable::HashAdd:
S-1-5-21-3941269898-4162109257-75492585-1003 added in bucket 3
USERENV(478.47c) 11:31:29:593 CUserProfile::CleanupUserProfile:
Enter
critical section.
USERENV(478.47c) 11:31:29:593 CUserProfile::GetRefCountAndFlags: Ref
count
is 0, state is 00000100
USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock
<S-1-5-21-3941269898-4162109257-75492585-1003>
USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock released
USERENV(478.47c) 11:31:29:609 CHashTable::HashDelete:
S-1-5-21-3941269898-4162109257-75492585-1003 deleted
USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock deleted
USERENV(478.47c) 11:31:29:625 CUserProfile::CleanupUserProfile:
Leave
critical section
USERENV(478.47c) 11:31:29:625 CUserProfile::Initialize: Proccessing
S-1-5-21-1957844674-164910922-1384523041-6808
USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock
<S-1-5-21-1957844674-164910922-1384523041-6808>
USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: No existing
entry found
USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: New entry
created
USERENV(478.47c) 11:31:29:640 CHashTable::HashAdd:
S-1-5-21-1957844674-164910922-1384523041-6808 added in bucket 2
USERENV(478.47c) 11:31:29:640 CUserProfile::CleanupUserProfile:
Enter
critical section.
USERENV(478.47c) 11:31:29:640 CUserProfile::GetRefCountAndFlags: Ref
count
is 0, state is 00000100
USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock
<S-1-5-21-1957844674-164910922-1384523041-6808>
USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock: Lock released
I am very Frustrated now and dont know what to do.
Can somebody help me in this please.

.





.



.

Relevant Pages

  • User cant access OWA or RWW
    ... New staff member aboard; heading out on a business trip so I'm walking her through the process of accessing her email and desktop remotely. ... Keeps getting the note that either her login or password are bad. ... I then used the Add User wizard in Server Management to create a new account for her. ... User not allowed to logon at this computer ...
    (microsoft.public.windows.server.active_directory)
  • Re: permissions not working
    ... I imagine that there is some unexpected rights that your user has that you ... I understand that this is a Windows login you are testing. ... have this login as a member?" ... and have created some new roles and assigned permissions to the ...
    (microsoft.public.sqlserver.security)
  • Domain Changed (HELP Please!!)
    ... I have a Dell laptop and it was setup to login to an active directory system ... group from "Member of Domain" to "Workgroup". ... Is there any way to logon to the computer as my previously ... the workgroup logon? ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: ASP security
    ... you get the NT Login box? ... from Domain B have rights to view them. ... "Reza" wrote in message ... If I logon to the same computer as a user in its native ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: cant login using RDP even in Remote Desktop User group
    ... rights had been granted ... ... it's not the logon locally right but the permission of RDP ... >>> login remotely into the member servers using terminal client, ... >>> one global group and put this group into Remote Desktop Users ...
    (microsoft.public.windows.server.security)