Slow login due to group participation

I have a client who's on a new terminal server, and it runs great but if
someone's in a particular group, the logon takes about 3 minutes. if they
aren't added to this single security group, login is instantaneous.

This group (companyname_users) is a securtiy group that has no group policy
objects applied to it. This group in question is a member of 37 other
security groups. They're using it to simplify their role group management.

Is there some way to determine where exactly the problem lies short of
removing those 37 groups one at a time, test to see if that was the problem,
add it back, and move to the next one?

Anyone have an easy way to help track down just where the delay is because of
the group membership?

Thanks for any suggestions.


--
John D [MVP - Tablet PC]
.

Relevant Pages

  • Re: Slow login due to group participation
    ... Windows Server 2003/2000/NT; CCA ... aren't added to this single security group, ... Is there some way to determine where exactly the problem lies short of ... the group membership? ...
    (microsoft.public.windows.server.general)
  • Re: Determine AD group membership
    ... Note that this will only give you security group info. ... As more and more LDAP based applications start using distribution lists for their internal security instead of Windows security groups this will play more and more into apps that need to monitor group membership. ... Kerberos tickets PAC data to get this info? ...
    (microsoft.public.platformsdk.security)
  • Re: Group Membership being applied more than once
    ... This posting is provided "AS IS" with no warranties, ... An example is I am a member of a security group called "TSUsers". ... The list will then display the same security group membership ... UK CTX Example1 ...
    (microsoft.public.windows.server.active_directory)
  • Re: how to restrict users to search in their own Organizational Unit
    ... 1- Create a Security Group and deny the read permission to certain OUs then Place the MOSS administrators that Security group so they can't have read access to that OUS. ... Now, as Herb stated in last post, you can have problems related to the maintenance of the group membership, because you're dealling with many OUs and Users, so you should write a script to automate the process of mantaining the group membership, and you can also use another script to define the new permissions, add users etc. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegating mailbox rights
    ... It's because your group membership gets enumerated at login. ... and later get added to a security group, ... membership and so at that point you can get access to the target mailbox. ...
    (microsoft.public.exchange.admin)