RE: Slow Logon related to groups

Hello Ferrell,

Thank you for posting here. Let's also thank Lanwench and Claus for the
input.

According to your description, I understand that some users belong to some
groups hang when logon workstations. If I have misunderstood the problem,
please don't hesitate to let me know.

Based on my research, I suggest we try the following steps to see if we can
resolve this issue:

1. If you enable roaming profile for the user account, please try to
disable roaming profile to test:

a. Open Server Management console on SBS

b. Locate on Users node, double click the problematic user account

c. Select Profile tab, leave blank of the Profile path box.

d. Click OK. Then, test this issue.

2. If you enable My Documents redirection on SBS, please try to disable it
to test:

To disable My Document redirection, please open Server Management console,
locate on Users node, click Configure My Documents Redirection link in
right pane, select Do not redirect My Documents Folders option, click OK.
Then restart client computers to apply this settings.

3. Ensure the problematic user has permission to access its home folder on
SBS:

After the problematic user logon workstation, please try to access
\\SBSname\Users\username\. Does it success?

If no, please check the shared permission and NTFS permission on the SBS
c:\Users Shared Folders\username. To ensure the every user be able to
access its home folder.

If we cannot resolve the issue after we perform the above steps, please
help me collect some information for further investigation:

1. Does this issue happen again when you try to logon problematic user
account on SBS?

2. Does this issue happen again when you try to logon problematic user
account on a good workstation?

3. Do you have any customize GPO on SBS?

4. Save the application event log and system event log as evt files on the
problematic workstation and send to my mailbox: v-terliu@xxxxxxxxxxxxx

5. Gather MPS network report on SBS:

a. Download MPSrepot_network from
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE

b. Run MPSRPT_NETWORK.exe on the server box.

c. The tool will automatically collect the information. This procedure will
take 10~15 minutes.

d. Open Windows Explorer, navigate to the folder:
%SystemRoot%\MPSReports\Network\Reports\Cab\

e. Send the .cab file directly to me at v-terliu@xxxxxxxxxxxxx

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Slow Logon related to groups
| thread-index: Acf/qwhkLGvwsnv1QF+5wy0b5O7POg==
| X-WBNR-Posting-Host: 207.46.192.207
| From: =?Utf-8?B?RmVycmVsbCBSYW1leQ==?=
<FerrellRamey@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <56A9F9E3-038C-41EB-8952-F8C72E2FA92D@xxxxxxxxxxxxx>
| Subject: RE: Slow Logon related to groups
| Date: Tue, 25 Sep 2007 12:34:04 -0700
| Lines: 129
| Message-ID: <2B4D9B06-F34A-4F98-9856-632B2AF85318@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:65528
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| From Server SBS2003 SP2:
|
| Windows IP Configuration
|
| Host Name . . . . . . . . . . . . : sbserver
| Primary Dns Suffix . . . . . . . : WesternValve.local
| Node Type . . . . . . . . . . . . : Unknown
| IP Routing Enabled. . . . . . . . : Yes
| WINS Proxy Enabled. . . . . . . . : Yes
| DNS Suffix Search List. . . . . . : WesternValve.local
|
| PPP adapter RAS Server (Dial In) Interface:
|
| Connection-specific DNS Suffix . :
| Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
| Physical Address. . . . . . . . . : 00-53-45-00-00-00
| DHCP Enabled. . . . . . . . . . . : No
| IP Address. . . . . . . . . . . . : 192.168.1.57
| Subnet Mask . . . . . . . . . . . : 255.255.255.255
| Default Gateway . . . . . . . . . :
| NetBIOS over Tcpip. . . . . . . . : Disabled
|
| Ethernet adapter Local Area Connection:
|
| Connection-specific DNS Suffix . :
| Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
| Connection #2
| Physical Address. . . . . . . . . : 00-13-72-F7-4F-E0
| DHCP Enabled. . . . . . . . . . . : No
| IP Address. . . . . . . . . . . . : 192.168.1.2
| Subnet Mask . . . . . . . . . . . : 255.255.255.0
| Default Gateway . . . . . . . . . : 192.168.1.1
| DNS Servers . . . . . . . . . . . : 192.168.1.2
| Primary WINS Server . . . . . . . : 192.168.1.2
|
| ---------------------------------------
| From Workstation - Windows XP SP2
|
| Windows IP Configuration
|
| Host Name . . . . . . . . . . . . : 28Y26B1
| Primary Dns Suffix . . . . . . . : WesternValve.local
| Node Type . . . . . . . . . . . . : Hybrid
| IP Routing Enabled. . . . . . . . : No
| WINS Proxy Enabled. . . . . . . . : No
| DNS Suffix Search List. . . . . . : WesternValve.local
| WesternValve.local
|
| Ethernet adapter Local Area Connection:
|
| Connection-specific DNS Suffix . : WesternValve.local
| Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
| Connection
| Physical Address. . . . . . . . . : 00-13-72-CD-CD-08
| Dhcp Enabled. . . . . . . . . . . : Yes
| Autoconfiguration Enabled . . . . : Yes
| IP Address. . . . . . . . . . . . : 192.168.1.68
| Subnet Mask . . . . . . . . . . . : 255.255.255.0
| Default Gateway . . . . . . . . . : 192.168.1.1
| DHCP Server . . . . . . . . . . . : 192.168.1.2
| DNS Servers . . . . . . . . . . . : 192.168.1.2
| Primary WINS Server . . . . . . . : 192.168.1.2
| Lease Obtained. . . . . . . . . . : Tuesday, September 25, 2007
| 7:39:50 AM
| Lease Expires . . . . . . . . . . : Wednesday, October 03, 2007
| 7:39:50 AM
|
| --
| As a "normal" user I can log into the network and everything seems to
work
| quickly, etc. That is why I was thinking it was NOT a DNS issue, but
rather
| related to the profile, or something to do with the groups themselves. I
| have resolved this issue by removing a user from all of the groups and
then
| adding them back, it seems to be that the more groups I add them to, the
| delay gets longer (but, I have not been able to prove this or recreate
the
| same issue every time).
|
| My groups (there are about a total of 10) are like AccountingGroup,
| EngineeringGroup, etc. All I am doing is giving those groups permissions
to
| files and folders. Other than that; I don't have the groups doing
anything.
|
| I have deleted the "domain" administrator's profile from the local
| workstation thinking it got corrupted; I removed the computer from the
domain
| and rejoined the domain. I've done the whole "ipconfig flushdns" and the
| other IP resets, and even tried to set the IP address as static and still
had
| the same issue.
|
| A couple of times I've seen something in the workstations event log
related
| to a downgrade attack on kerbos, and around the same time there was an
issue
| with syncing the time with the server. Both of those have stopped, and
the
| user can work on the computer, etc. But when I go to do something as the
| domain administrator, it takes for ever to get to the desktop of the
| workstation. I sort of gave up on it because I can unplug the patch
cable
| and the computer goes right to the desktop and I plug back in and
everything
| seems to go great past that, but this has got me stumped.
|
| Thanks!
|
| Ferrell
|
|
|
| "Ferrell Ramey" wrote:
|
| > I have a small business server and have created different security and
| > distriubution groups. I've not been able to narrow down which group(s)
are
| > causing an issue, but if I try to login to a workstation as the domain
admin;
| > the computer will hang for 5-10 minutes or until I unplug the network
patch
| > cable.
| >
| > If I create a brand new user and don't put them into any groups, the
| > computer logs in quickly. I've been going through and adding that user
to
| > the different groups and combination of groups trying to figure out
what is
| > going on.
| >
| > This happens on multiple computers with different users, I've been
removing
| > the users from all of the groups and then adding them back in
one-by-one.
| >
| > Anyone have any ideas? I'd hate to have to blow away all of the groups
and
| > start from scratch. This started in March, the server had always been
real
| > quick, and users were able to login into the server quickly, then over
night
| > this started.
| >
| > It seems like my group(s) got corrupted?, is there a "repair" or a way
to
| > export, blow away and rebuild them that won't turn into a nightmare?
| >
| > --
| > Thanks!
| >
| > Ferrell
|

.

Relevant Pages

  • Re: Kerberos Errors ?
    ... The user can access the server resources without ... Corruption on the particular workstation. ... please tell me what's the version of the SBS ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Still cant connect to RWW or OWA remotely
    ... Please post an IP ipconfig /all for the server and for the workstation ... I'm concerned that you can't access RWW by attaching a non-domain laptop (IP ... RRW using the public IP address specified in the Web Server Certificate ... If you can't remote into the SBS server from a port on the ...
    (microsoft.public.windows.server.sbs)
  • Re: Trouble integrating existing SBS 2003 server into a home netwo
    ... If the problematic workstation is getting that IP, ... workstations and the SBS server should be using 192.168.1.x as an ip range. ... Disabling Internet Connection Sharing and Internet Sharing ...
    (microsoft.public.windows.server.sbs)
  • Re: Trouble integrating existing SBS 2003 server into a home netwo
    ... If the problematic workstation is getting that IP, ... workstation to see if it picks up an IP address from the server. ... match the IP range for hte SBS network. ... Disabling Internet Connection Sharing and Internet Sharing ...
    (microsoft.public.windows.server.sbs)
  • RE: Cannot access companyweb
    ... to migrate from SBS 2003 to SBS2003, in this period, you can't achieve this ... 825763 How to configure Internet access in Windows Small Business Server ... By this method, you need to manually restore Exchange data, SharePoint ... Another way is to create a local profile, ...
    (microsoft.public.windows.server.sbs)