AD admin tools on XP slow

[Mike]

I posted this in another area, and think it probably is
more appropriate in this newsgroup.

I have the 2000 Admin tools running on my W2K accessing my
AD backend (2000) fast as lightening.

But when I load the 2003 Admin Tools on my XP box, it's
slow as mollasses in january.

Ethereal shows me a few of these suspect messages while
loading the app (takes 30 seconds or more to launch):

"Invalid LDAP message: Can't parse sequence header:
Wrong type for that item"

There's quite a few of those in there. Not sure if
anyone out there has ran into this before. ?? Thanks
for any help.

Mike

 

[Mike]

Dug a little deeper into that packet, and it appears to be
a Kerberos thing. I am now suspecting the authentication
type between XP-2000 is not happy, like XP is trying to
use Kerberos, and my 2000 DC is not.

That's the latest, if anyone has any other ideas, I'd be
happy to hear 'em. Danka

///M

 

[serverguy]

They should both use Kerberos at the machine account level. You can see
that in the DC security event logs.
I've had similar problems on XP. Try right-clicking My
Computer>>Properties>>Advanced Tab. Click Performance Options and set to
Best performance, and see if that helps. It baselines all the pretty
graphics, but that's the sacrifice you have to make.

 

[Mike]

I already run the XP desktops here in that mode. This is
way more serious than some graphics overhead. It's a
serious network negotiation problem.

It is like absolute lightening on my W2K Pro box.
There's got to be some basic LDAP or negotiations
problem. I just tried launching it and to bring it up
took well over 1 minute. That's just wrong. On my W2K
box, to bring up the same domain/amount of users (3500
approx) takes a few seconds. And my W2K box is 4 year
old hardware and hasn't been rebuilt in over 2 years!

Wierd.

Thanks,

Mike

 

[Andrew Mitchell]

I already run the XP desktops here in that mode. This is
way more serious than some graphics overhead. It's a
serious network negotiation problem.

It is like absolute lightening on my W2K Pro box.
There's got to be some basic LDAP or negotiations
problem. I just tried launching it and to bring it up
took well over 1 minute. That's just wrong. On my W2K
box, to bring up the same domain/amount of users (3500
approx) takes a few seconds. And my W2K box is 4 year
old hardware and hasn't been rebuilt in over 2 years!

Not sure precisely what it could be but it definitely sounds like an AD
problem. Are the DNS settings on the XP box correct?
The only other thing I can think of trying is to remove the machine from the
domain, deleting the computer account from ADUC then reintroducing it to the
domain?

 

[Mike]

I may give that a try. Yes, the DNS settings are
correct. Thanks for your help - I'll post here again if
that doesn't help!
Cheers,
Mike

 

[Mike]

I tried deleting/readding the PC to the domain with no
luck. It's still dog slow. Other XP's are the same. We
are still running in Mixed Mode - this shouldn't be a
problem though, eh?

Thanks,

Mike