Do the same users log on to both NT systems and windows 2000 systems? If so I have seen the following problem create very long logons due to profile problems -> Q271518
Ken -----Original Message----- From: Darren Mar-Elia [mailto:[EMAIL PROTECTED] Sent: Thursday, September 25, 2003 1:38 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Incredibly slow log on Mark- When these strange slowdowns happen, I usually find it helpful to enable userenv logging on the workstation. The problems could be a combination of GPO processing and profile downloading. The fact that NT clients don't have a problem points towards a possible hangup in GPO processing, since NT doesn't process GPOs. Check out http://support.microsoft.com/default.aspx?scid=kb;en-us;221833 to enable verbose userenv logging and then take a look at the resulting log file. The events in there are time-stamped, with the tail of the file being the most recent events. Look for long lag times in between events. If you need help interpreting the file, go ahead and send me an email off line. Good luck, Darren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Abbiss, Mark Sent: Thursday, September 25, 2003 1:37 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Incredibly slow log on Just wondering if anyone else has encountered this problem. We have just installed a small external office with some new clients. They authenticate with the AD across a 512Mb fixed line. There are the "usual" encryption/firewall devices between the two sites. When logging on in the office with an adminstrative account which has no associated scripts, the logon process is quick and painless. The admin accounts also have no roaming profiles to worry about. However, when logging on with a user accounts, which does have a script and roaming profile (max size 8MB) associated with it, the logon process can take 25 minutes and generally the roaming profile it not successfully retrieved. A couple of old NT cleints left in the office that authenticate with an NT domain controller across the same line through the same encryption/firewall devices have no such problems at all. What I would like to ask is what part of the W2K environment could be causing such slow responses across this line ? The clients are XP. Is there some tweak that could speed up the data exchange ? I have been discussing it internally and mention has been made of whether the communication is UDP or TCP. I have to admit complete ignorance of what this means. But it seems communication can be defaulted to one or the other, which has an impact. I really am clueless though. I probably wont get any replies to this but am just curious as to what could possibly be contributing to the problem. Many thanks for any pointers. Mark List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
