Re: Slow Logon related to groups
- From: "Claus" <cjobes@xxxxxxxxxxxxx>
- Date: Tue, 25 Sep 2007 18:17:39 -0400
If you log into another workstation with the Domain Admin account, do you
have the same problem or is it only the one workstation? If that's the case
I would agree that there is a problem with the profile and not a group
issue. I have installations where users belong to 10+ security groups and
the login is instantaneous.
--
Claus
"Ferrell Ramey" <FerrellRamey@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2B4D9B06-F34A-4F98-9856-632B2AF85318@xxxxxxxxxxxxxxxx
From Server SBS2003 SP2:
Windows IP Configuration
Host Name . . . . . . . . . . . . : sbserver
Primary Dns Suffix . . . . . . . : WesternValve.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : WesternValve.local
PPP adapter RAS Server (Dial In) Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.57
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection #2
Physical Address. . . . . . . . . : 00-13-72-F7-4F-E0
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.2
Primary WINS Server . . . . . . . : 192.168.1.2
---------------------------------------
From Workstation - Windows XP SP2
Windows IP Configuration
Host Name . . . . . . . . . . . . : 28Y26B1
Primary Dns Suffix . . . . . . . : WesternValve.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : WesternValve.local
WesternValve.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : WesternValve.local
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
Connection
Physical Address. . . . . . . . . : 00-13-72-CD-CD-08
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.68
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.2
DNS Servers . . . . . . . . . . . : 192.168.1.2
Primary WINS Server . . . . . . . : 192.168.1.2
Lease Obtained. . . . . . . . . . : Tuesday, September 25, 2007
7:39:50 AM
Lease Expires . . . . . . . . . . : Wednesday, October 03, 2007
7:39:50 AM
--
As a "normal" user I can log into the network and everything seems to work
quickly, etc. That is why I was thinking it was NOT a DNS issue, but
rather
related to the profile, or something to do with the groups themselves. I
have resolved this issue by removing a user from all of the groups and
then
adding them back, it seems to be that the more groups I add them to, the
delay gets longer (but, I have not been able to prove this or recreate the
same issue every time).
My groups (there are about a total of 10) are like AccountingGroup,
EngineeringGroup, etc. All I am doing is giving those groups permissions
to
files and folders. Other than that; I don't have the groups doing
anything.
I have deleted the "domain" administrator's profile from the local
workstation thinking it got corrupted; I removed the computer from the
domain
and rejoined the domain. I've done the whole "ipconfig flushdns" and the
other IP resets, and even tried to set the IP address as static and still
had
the same issue.
A couple of times I've seen something in the workstations event log
related
to a downgrade attack on kerbos, and around the same time there was an
issue
with syncing the time with the server. Both of those have stopped, and
the
user can work on the computer, etc. But when I go to do something as the
domain administrator, it takes for ever to get to the desktop of the
workstation. I sort of gave up on it because I can unplug the patch cable
and the computer goes right to the desktop and I plug back in and
everything
seems to go great past that, but this has got me stumped.
Thanks!
Ferrell
"Ferrell Ramey" wrote:
I have a small business server and have created different security and
distriubution groups. I've not been able to narrow down which group(s)
are
causing an issue, but if I try to login to a workstation as the domain
admin;
the computer will hang for 5-10 minutes or until I unplug the network
patch
cable.
If I create a brand new user and don't put them into any groups, the
computer logs in quickly. I've been going through and adding that user
to
the different groups and combination of groups trying to figure out what
is
going on.
This happens on multiple computers with different users, I've been
removing
the users from all of the groups and then adding them back in one-by-one.
Anyone have any ideas? I'd hate to have to blow away all of the groups
and
start from scratch. This started in March, the server had always been
real
quick, and users were able to login into the server quickly, then over
night
this started.
It seems like my group(s) got corrupted?, is there a "repair" or a way to
export, blow away and rebuild them that won't turn into a nightmare?
--
Thanks!
Ferrell
.
- Follow-Ups:
- Re: Slow Logon related to groups
- From: Ferrell Ramey
- Re: Slow Logon related to groups
- References:
- RE: Slow Logon related to groups
- From: Ferrell Ramey
- RE: Slow Logon related to groups
- Prev by Date: Re: Remote Access
- Next by Date: Re: FTP downloads to server timeout after 60 seconds
- Previous by thread: RE: Slow Logon related to groups
- Next by thread: Re: Slow Logon related to groups
- Index(es):
Relevant Pages
|
Loading
