Security policies takes 30 min when starting up client

[Anne-H]

I have 2 DC in AD.
Some of my cklient (w2k prof) take to long to startup.
The PC "hang" when "security policies apply.."
It can takes up to 30 min before Ctrl-Alt-Del appears.
I do not use group or security policies in AD.
When I run security analyze on the client the IPSEC Policy
Agent has a faliure.
Please help me!
Thanks
Anne-H

 

[stevta [MSFT]]

The dc's should be running DNS. They should be registering a FORWARD lookup
zone for your domain.

Yourdomain.com
_msdcs


Under the dns there should be a _msdcs folder with the GUID for your two
dc's plus some other folders.
These records need to be here.

You client machines should only point to DNS on the dc.
Try no wins or lmhosts files and just DNS and check the speed.

 

[Nick Finco [MSFT]]

I have read some posts where ICMP was being blocked to the client computers
and this could happen. I don't know any details beyond that though.

N