RE: Slow Logon related to groups
- From: Ferrell Ramey <FerrellRamey@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 25 Sep 2007 12:34:04 -0700
From Server SBS2003 SP2:
Windows IP Configuration
Host Name . . . . . . . . . . . . : sbserver
Primary Dns Suffix . . . . . . . : WesternValve.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : WesternValve.local
PPP adapter RAS Server (Dial In) Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.57
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection #2
Physical Address. . . . . . . . . : 00-13-72-F7-4F-E0
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.2
Primary WINS Server . . . . . . . : 192.168.1.2
---------------------------------------
From Workstation - Windows XP SP2
Windows IP Configuration
Host Name . . . . . . . . . . . . : 28Y26B1
Primary Dns Suffix . . . . . . . : WesternValve.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : WesternValve.local
WesternValve.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : WesternValve.local
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
Connection
Physical Address. . . . . . . . . : 00-13-72-CD-CD-08
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.68
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.2
DNS Servers . . . . . . . . . . . : 192.168.1.2
Primary WINS Server . . . . . . . : 192.168.1.2
Lease Obtained. . . . . . . . . . : Tuesday, September 25, 2007
7:39:50 AM
Lease Expires . . . . . . . . . . : Wednesday, October 03, 2007
7:39:50 AM
--
As a "normal" user I can log into the network and everything seems to work
quickly, etc. That is why I was thinking it was NOT a DNS issue, but rather
related to the profile, or something to do with the groups themselves. I
have resolved this issue by removing a user from all of the groups and then
adding them back, it seems to be that the more groups I add them to, the
delay gets longer (but, I have not been able to prove this or recreate the
same issue every time).
My groups (there are about a total of 10) are like AccountingGroup,
EngineeringGroup, etc. All I am doing is giving those groups permissions to
files and folders. Other than that; I don't have the groups doing anything.
I have deleted the "domain" administrator's profile from the local
workstation thinking it got corrupted; I removed the computer from the domain
and rejoined the domain. I've done the whole "ipconfig flushdns" and the
other IP resets, and even tried to set the IP address as static and still had
the same issue.
A couple of times I've seen something in the workstations event log related
to a downgrade attack on kerbos, and around the same time there was an issue
with syncing the time with the server. Both of those have stopped, and the
user can work on the computer, etc. But when I go to do something as the
domain administrator, it takes for ever to get to the desktop of the
workstation. I sort of gave up on it because I can unplug the patch cable
and the computer goes right to the desktop and I plug back in and everything
seems to go great past that, but this has got me stumped.
Thanks!
Ferrell
"Ferrell Ramey" wrote:
I have a small business server and have created different security and.
distriubution groups. I've not been able to narrow down which group(s) are
causing an issue, but if I try to login to a workstation as the domain admin;
the computer will hang for 5-10 minutes or until I unplug the network patch
cable.
If I create a brand new user and don't put them into any groups, the
computer logs in quickly. I've been going through and adding that user to
the different groups and combination of groups trying to figure out what is
going on.
This happens on multiple computers with different users, I've been removing
the users from all of the groups and then adding them back in one-by-one.
Anyone have any ideas? I'd hate to have to blow away all of the groups and
start from scratch. This started in March, the server had always been real
quick, and users were able to login into the server quickly, then over night
this started.
It seems like my group(s) got corrupted?, is there a "repair" or a way to
export, blow away and rebuild them that won't turn into a nightmare?
--
Thanks!
Ferrell
- Follow-Ups:
- RE: Slow Logon related to groups
- From: Terence Liu [MSFT]
- Re: Slow Logon related to groups
- From: Claus
- RE: Slow Logon related to groups
- Prev by Date: Re: SBS 2003 POP3 Connector Question
- Next by Date: Re: Terminating program that are stopping TS session from closing
- Previous by thread: Re: Slow Logon related to groups - Update!
- Next by thread: Re: Slow Logon related to groups
- Index(es):
Relevant Pages
|
