Login to Domain way to Slow

[Ron Boetger]

Login to Domain Sloooow

I am setting up a new network. We have purchased a new Windows 2003
Server and Windows XP PRO workstations. When I login to the local
workstation it is very fast. When I login to the domain it is slow.
Is there a way to fix this?


Also I have setup the users to be an administrator to their own
workstation, BUT when I login to the Domain. There are certain things
they cannot do unless they re-login to the local workstation. Like
add and remove programs. I have gone into the Computer Management and
added the user to the ADMIN group of the local workstation but still
no good.

Any Ideas how to fix this?

Thanks

Ron

 

[Carey Frisch [MVP]]

Ensure that you have good DNS name resolution in your environment.
All Windows XP clients should point to an internal DNS server that is
authoritative for the domain.

If that is OK, then you might want to enable UserEnv logging
and take a network trace to see where the delay is:

How to Enable User Environment Debug Logging in Retail Builds of Windows
http://support.microsoft.com/?id=221833

Description of the Windows XP Professional Fast Logon Optimization Feature
http://support.microsoft.com/default.aspx?scid=kb;en-us;305293&Product=winxp

Logon Optimization
http://msdn.microsoft.com/library/d...ry/en-us/policy/policy/logon_optimization.asp

Please visit the experts in the networking newsgroup
news://msnews.microsoft.com/microsoft.public.windowsxp.network_web

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

----------------------------------------------------------------------


| Login to Domain Sloooow
|
| I am setting up a new network. We have purchased a new Windows 2003
| Server and Windows XP PRO workstations. When I login to the local
| workstation it is very fast. When I login to the domain it is slow.
| Is there a way to fix this?
|
|
| Also I have setup the users to be an administrator to their own
| workstation, BUT when I login to the Domain. There are certain things
| they cannot do unless they re-login to the local workstation. Like
| add and remove programs. I have gone into the Computer Management and
| added the user to the ADMIN group of the local workstation but still
| no good.
|
| Any Ideas how to fix this?
|
| Thanks
|
| Ron
|

 

[Lanwench [MVP - Exchange]]

As Cary said, this can occur due to DNS misconfiguration. All servers and
workstations should specify *only* the internal AD-integrated DNS server's
IP address in their network settings. The AD-integrated DNS server should be
set up with forwarders to your ISP's DNS servers for external resolution.

As to local admin rights - adding the domain users to the local admin group
will let them do pretty much anything. However, I don't recommend granting
these rights. Users really shouldn't be installing software in the first
place - that's what the admin is there for.

 

[Ron Boetger]

Can this be helped with an entry to the host file on the XP
Workststions?

Thanks

Ron

 

[Ron Boetger]

With regard to the security I really don't care about that. As it
stands, I can't even delete an Icon on the desktop if I am logged in
to the domain. I have tried to add the domain user name to the Admins
on the local workstation but I am not able to ei:
domain-name\username and it will not allow me. I have tried to do
this as the Domain Admin and the local workstation Admin.

Any Ideas

Many Thanks
Ron

 

[Lanwench [MVP - Exchange]]

Can this be helped with an entry to the host file on the XP
Workststions?

Why would you want to do that rather than fix your DNS problems, presuming
that's the issue?

 

[Ron Boetger]

It's a fast test! Will fix DNS. As any cut over to a new system, so
many things to do - so little time!

This security thing is driving me nuts. If I log into the domain I
have no control at the workstation.

Ron

 

[Lanwench [MVP - Exchange]]

It's a fast test! Will fix DNS. As any cut over to a new system, so
many things to do - so little time!

Since the probable fix is setting up forwarders in DNS, and changing your
DHCP scope so that all clients and servers use only your internal DNS server
IP in their IP configuration, it's pretty quick there, too....

This security thing is driving me nuts. If I log into the domain I
have no control at the workstation.

Who is in the local admins group on the workstation?

Ron

Can this be helped with an entry to the host file on the XP
Workststions?

Why would you want to do that rather than fix your DNS problems,
presuming that's the issue?

Thanks

Ron

On Sun, 1 Aug 2004 11:12:05 -0400, "Lanwench [MVP - Exchange]"

As Cary said, this can occur due to DNS misconfiguration. All
servers and workstations should specify *only* the internal
AD-integrated DNS server's IP address in their network settings.
The AD-integrated DNS server should be set up with forwarders to
your ISP's DNS servers for external resolution.

As to local admin rights - adding the domain users to the local
admin group will let them do pretty much anything. However, I don't
recommend granting these rights. Users really shouldn't be
installing software in the first place - that's what the admin is
there for.

Ron Boetger wrote:
Login to Domain Sloooow

I am setting up a new network. We have purchased a new Windows
2003 Server and Windows XP PRO workstations. When I login to the
local workstation it is very fast. When I login to the domain it
is slow. Is there a way to fix this?


Also I have setup the users to be an administrator to their own
workstation, BUT when I login to the Domain. There are certain
things they cannot do unless they re-login to the local
workstation. Like add and remove programs. I have gone into the
Computer Management and added the user to the ADMIN group of the
local workstation but still no good.

Any Ideas how to fix this?

Thanks

Ron