Re: AD authentication drops

[Jeff Brown]

Have issue on frsevent(failed) and systemlog test also.  everything else
check good.  No obviously related issues in server log files.

On Tue, Sep 30, 2008 at 10:25 AM, Miller Bonnie L. <
[EMAIL PROTECTED]> wrote:

>  Sounds like offline files issue across the board.  We are actually
> working on a similar problem for some of our laptop users right now, and
> symptoms are almost identical--
>
>
>
> 1)  Implement a GPO that disables offline file caching for all domain
> machines that do NOT absolutely need it.  For us, this covers our typical
> wired desktop machines.  \Computer Configuration\Administrative
> Templates\Network\Offline Files, set the "Allow or Disallow use of the
> Offline Files feature" to disabled.
>
>
>
> 2)  For machines that must have offline files enabled (like laptops),
> read through http://support.microsoft.com/kb/811660/en-us.  Some of this
> can be set via GPO, but if you have a large number of computers, you will
> probably need to be enter some on each machine via regedit (eg, set the
> primary user).
>
>
>
> 3)  Short-term fix on each machine can be achieved by following
> http://support.microsoft.com/kb/230738/en-us to re-initialize the offline
> files cache database, losing all offline files (make sure you are as sync-ed
> as possible first).  But, unless you implement some measure from step 1/2,
> the problem WILL reappear when different users log onto the computers.
>
>
>
> -Bonnie
>
>
>
>
>
> *From:* Jeff Brown [mailto:[EMAIL PROTECTED]
> *Sent:* Tuesday, September 30, 2008 7:25 AM
> *To:* NT System Admin Issues
> *Subject:* AD authentication drops
>
>
>
> Anyone else have this problem?
>
>
>
> W2k3 server environment, XP Pro desktops all part of single domain AD
> setup.
>
>
>
> Logon script maps access to shared folders for all employees.  One mapped
> drive for shared workspace, one for private.
>
>
>
> Frequently something happens and the mapped drives "dissapear".  If you try
> to attach by start;run and use the unc to the folder it will typically show
> one or none of the 12 or so folders that are there.  logging off and back on
> almost always fixes it back.
>
>
>
> We have about 120 desktops in 4 different offices.  This problem crops up
> almost daily and shows up in every location.
>
>
>
> We also run Exchange, so they are maintaining a connection there as well,
> and we have seen outlook drop authentication too,  so that they are asked
> for a username/password midstream, which almost always results in a support
> call, because it needs the domain\ info before the username when it does
> that.  The outlook authentication happens way less frequently than the
> problem with mapped drives.
>
>
>
> any ideas?
>
>
>
> Been fighting this for a while.  Replaced storage vault with new hardward
> and had hoped that this problem would go away with that, but it had no
> affect.
>
>
>
> Thanks for any help.
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

RE: AD authentication drops

[Miller Bonnie L .]

Sounds like offline files issue across the board.  We are actually working on a 
similar problem for some of our laptop users right now, and symptoms are almost 
identical--


1)  Implement a GPO that disables offline file caching for all domain 
machines that do NOT absolutely need it.  For us, this covers our typical wired 
desktop machines.  \Computer Configuration\Administrative 
Templates\Network\Offline Files, set the "Allow or Disallow use of the Offline 
Files feature" to disabled.



2)  For machines that must have offline files enabled (like laptops), read 
through http://support.microsoft.com/kb/811660/en-us.  Some of this can be set 
via GPO, but if you have a large number of computers, you will probably need to 
be enter some on each machine via regedit (eg, set the primary user).



3)  Short-term fix on each machine can be achieved by following 
http://support.microsoft.com/kb/230738/en-us to re-initialize the offline files 
cache database, losing all offline files (make sure you are as sync-ed as 
possible first).  But, unless you implement some measure from step 1/2, the 
problem WILL reappear when different users log onto the computers.

-Bonnie


From: Jeff Brown [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 30, 2008 7:25 AM
To: NT System Admin Issues
Subject: AD authentication drops

Anyone else have this problem?

W2k3 server environment, XP Pro desktops all part of single domain AD setup.

Logon script maps access to shared folders for all employees.  One mapped drive 
for shared workspace, one for private.

Frequently something happens and the mapped drives "dissapear".  If you try to 
attach by start;run and use the unc to the folder it will typically show one or 
none of the 12 or so folders that are there.  logging off and back on almost 
always fixes it back.

We have about 120 desktops in 4 different offices.  This problem crops up 
almost daily and shows up in every location.

We also run Exchange, so they are maintaining a connection there as well, and 
we have seen outlook drop authentication too,  so that they are asked for a 
username/password midstream, which almost always results in a support call, 
because it needs the domain\ info before the username when it does that.  The 
outlook authentication happens way less frequently than the problem with mapped 
drives.

any ideas?

Been fighting this for a while.  Replaced storage vault with new hardward and 
had hoped that this problem would go away with that, but it had no affect.

Thanks for any help.





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

RE: AD authentication drops

[Troy Meyer]

+2

This is almost certainly backend infrastructure that is having issues.  Along 
with what James said, check for DNS or time issues.  What do your DCs look like 
when you run replmon or dcdiag?

-troy

-Original Message-
From: James Rankin [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 30, 2008 7:32 AM
To: NT System Admin Issues
Subject: Re: AD authentication drops

Do you have any errors on the DCs or (particularly) on the member servers where 
you are seeing your connections dropping, or even on the workstations 
themselves? I'd be looking for anything red or yellow in there that looks 
interesting...maybe domain authentication failures, NetLogon errors, errors 
from Workstation or Server services, etc.


2008/9/30 Jeff Brown <[EMAIL PROTECTED]>


Anyone else have this problem?

W2k3 server environment, XP Pro desktops all part of single domain AD 
setup.

Logon script maps access to shared folders for all employees.  One 
mapped drive for shared workspace, one for private.

Frequently something happens and the mapped drives "dissapear".  If you 
try to attach by start;run and use the unc to the folder it will typically show 
one or none of the 12 or so folders that are there.  logging off and back on 
almost always fixes it back.

We have about 120 desktops in 4 different offices.  This problem crops 
up almost daily and shows up in every location.

We also run Exchange, so they are maintaining a connection there as 
well, and we have seen outlook drop authentication too,  so that they are asked 
for a username/password midstream, which almost always results in a support 
call, because it needs the domain\ info before the username when it does that.  
The outlook authentication happens way less frequently than the problem with 
mapped drives.

any ideas?

Been fighting this for a while.  Replaced storage vault with new 
hardward and had hoped that this problem would go away with that, but it had no 
affect.

Thanks for any help.













~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Re: AD authentication drops

[James Rankin]

Do you have any errors on the DCs or (particularly) on the member servers
where you are seeing your connections dropping, or even on the workstations
themselves? I'd be looking for anything red or yellow in there that looks
interesting...maybe domain authentication failures, NetLogon errors, errors
from Workstation or Server services, etc.

2008/9/30 Jeff Brown <[EMAIL PROTECTED]>

> Anyone else have this problem?
>
> W2k3 server environment, XP Pro desktops all part of single domain AD
> setup.
>
> Logon script maps access to shared folders for all employees.  One mapped
> drive for shared workspace, one for private.
>
> Frequently something happens and the mapped drives "dissapear".  If you try
> to attach by start;run and use the unc to the folder it will typically show
> one or none of the 12 or so folders that are there.  logging off and back on
> almost always fixes it back.
>
> We have about 120 desktops in 4 different offices.  This problem crops up
> almost daily and shows up in every location.
>
> We also run Exchange, so they are maintaining a connection there as well,
> and we have seen outlook drop authentication too,  so that they are asked
> for a username/password midstream, which almost always results in a support
> call, because it needs the domain\ info before the username when it does
> that.  The outlook authentication happens way less frequently than the
> problem with mapped drives.
>
> any ideas?
>
> Been fighting this for a while.  Replaced storage vault with new hardward
> and had hoped that this problem would go away with that, but it had no
> affect.
>
> Thanks for any help.
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

AD authentication drops

[Jeff Brown]

Anyone else have this problem?

W2k3 server environment, XP Pro desktops all part of single domain AD setup.

Logon script maps access to shared folders for all employees.  One mapped
drive for shared workspace, one for private.

Frequently something happens and the mapped drives "dissapear".  If you try
to attach by start;run and use the unc to the folder it will typically show
one or none of the 12 or so folders that are there.  logging off and back on
almost always fixes it back.

We have about 120 desktops in 4 different offices.  This problem crops up
almost daily and shows up in every location.

We also run Exchange, so they are maintaining a connection there as well,
and we have seen outlook drop authentication too,  so that they are asked
for a username/password midstream, which almost always results in a support
call, because it needs the domain\ info before the username when it does
that.  The outlook authentication happens way less frequently than the
problem with mapped drives.

any ideas?

Been fighting this for a while.  Replaced storage vault with new hardward
and had hoped that this problem would go away with that, but it had no
affect.

Thanks for any help.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~