Re: Extremely LONG Login Times

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ole Kristian BangQ=A5s?= (ole_kristian_bangaas_at_hotmail.com)
Date: 08/03/04 

Date: Wed, 04 Aug 2004 00:21:22 +0200

On Tue, 3 Aug 2004 13:43:01 -0700, Steve Athanas
<SteveAthanas@discussions.microsoft.com> wrote:

> This one seems to be a doozie. I’ve already confused my network support
> guys, and now I’m going outside for some help. Recently, our
> organization completed a migration to Windows XP. Upon doing so,
> computers in several subnets stopped logging in any resemblance of a
> timely fashion.
>
> It seems that once we re-imaged each system in those areas with XP,
> login-script (batch file) processing has been elongated to over 10
> minutes, and furthermore, other processes fail to work right, such as
> logging into our Exchange server. When we disable the login-scripts, the
> login processes acceptably, but no where near as fast as 2000 did, even
> with login-scripts enabled. Also, if I remove all commands from the
> login-script, it still processes poorly.
>
> What’s puzzling, is that this is only on a few subnets, and our Network
> staff has assured me that nothing is being blocked by any of the routers
> or the firewall in front of the servers.
>
> If anyone can help with this problem, it would be most appreciated,
> because we’re at a loss, and now we have people who can’t do their jobs
> getting very angry at us. Does anyone know what protocols and/or ports
> Login Scripts process on?

I don't know if I'm the right person to answer, but I give it a try. First
of all I wonder what kind of domain you are running. I would guess Windows
2000 native or Windows 2003 Native.

Furhtermore, if my assumption is right, have you defined several sites?
How is the connection between the subnets. Are there any domain controllers
present on the subnets that has problems?

It may seem to me that there are a problem resolving membership of
universal groups. To do this the clients have to connect to a global
catalog
server. If the nearest global catalog server is located on the other side
of a slow WAN link, you may get trouble. This can either be solved by
making one or more of your local domain controllers (assuming you have one)
global catalog server, or enabling universal group membership caching for
the site. Needless to say, not having a domain controller in the site at
all
is also slowing down the logon process.

Hope this helps. 

-- 
Ole Kristian Bangås
http://www.bangaas.com/

Relevant Pages

  • Re: Transferring of FSMO Roles (Urgent!)
    ... You should then see all of the Domain Controllers listed as DC ... and then you should see each Global Catalog Server listed as GC. ... After the installation of Outlook and the ... Where are you checking the GAL properties? ...
    (microsoft.public.win2000.active_directory)
  • Re: High traffic from replication between DC!!! Please help.
    ... I have made every DC a Global Catalog Server, ... And you have correctly created the Subnets and associated ... The clients are using DHCP and they are pointing to their local DC for DNS, ... working fine before the upgrade. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Authentication Failure
    ... You mention that you are using image installs which is fine but the imaging ... require access to a global catalog server. ... between domain members and domain controllers. ... >> administrator and clearing the security log. ...
    (microsoft.public.win2000.security)
  • Re: Transferring of FSMO Roles (Urgent!)
    ... the available GCs or Domain Controllers and now it has the same state as ... problm from re-occuring on my next FSMO roles transfer. ... What is the appropriate way of doing the FSMO roles transfer? ... > and then you should see each Global Catalog Server listed as GC. ...
    (microsoft.public.win2000.active_directory)
  • Re: Replacing a DC
    ... Ensure at least one Global Catalog Server exist in the domain, ... have to be covered by one or more domain controllers. ... > Once I demote a DC called XXX can I reuse the name XXX on ... > Do I need to delete the computer account once i have ...
    (microsoft.public.windows.server.active_directory)