Active Directory: Very Slow Authentication

[Mike Davies]

Hi,

I've got an AD domain running on Windows 2003 with 3 additional Windows 2000
servers as members of that domain, it is a single domain on it's own.

When I login to domain controller server it is very fast as expected but if
I login to any of the other three servers it takes approx 20-30 seconds
before it accepts my username and password. Then it takes a further 5-10
mins while it says "Loading Personal Settings".

Any ideas what could be causing this delay? There doesn't seem to be
anything related in the event log and all the systems are on the same
sub-net connected to the same 100mb/s switch.

Normal network traffic between the servers is very quick.

Thanks

Michael

 

[Chriss3 [MVP]]

Michael,
How is TCP/IP DNS Settings on the other three servers, only the DNS holding
the DNS zone for your Active Directory Domain should be in there, no
external or ISP, The DNS Server that host the AD zone is mostly the first
deployed domain controller.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup

 

[Mike Davies]

Hi Christoffer,

The IP Addresses on all server is fixed with the DNS server pointing to the
domain controller.

DNS server running on the domain controller only has one entry for the AD
Zone, I've then setup forwarding to my previous DNS server for any
unresolved queries.

Michael

 

[Chriss3 [MVP]]

Mike,
We move forward with this
Hows is the SMB Signing Option. Is it still slow if you turn SMB Signing
off?

This option are located in Default Domain Policy and is enabled by default:
Computer Configuration\Windows Settings\Security Settings\Local
Policies\Security Options

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup