DC response very slow.

[Sarfraz Malik]

For the last two days the login to AD domain takes about 5 minutes. We have 2
DC. Is there any thing which I can check to see why the login is taking that
mush time. Thanks.

 

[Giorgos]

Hello,
Have you checked if DNS is working properly? Are there any error messages on
the event viewer?
Has something changed on your network topology these last two days?

 

[Sarfraz Malik]

The DNS is working fine and there are no error in event viewer, to my
knowledge no changes have been made to network topology.

 

[Meinolf Weber [MVP-DS]]

Hello Sarfraz,

Make sure to use only Domain DNS servers on the machines NIC. NO external
ones. Please post an unedited ipconfig /all from both DC's and also a client.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[Sarfraz Malik]

Here are the Ipconfig /all
From DC1:
C:\Documents and Settings\smalik2>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : ssb21
Primary Dns Suffix . . . . . . . : vcsa.uic.edu
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : vcsa.uic.edu
uic.edu

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-06-5B-F3-89-21
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 131.193.141.215
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 131.193.141.1
DNS Servers . . . . . . . . . . . : 131.193.141.215
Primary WINS Server . . . . . . . : 131.193.144.190
Secondary WINS Server . . . . . . : 131.193.141.59

From DC2:
C:\Documents and Settings\smalik2>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : ssb26
Primary Dns Suffix . . . . . . . : vcsa.uic.edu
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : vcsa.uic.edu
uic.edu

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
Physical Address. . . . . . . . . : 00-0F-1F-67-78-32
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 131.193.141.103
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 131.193.141.1
DNS Servers . . . . . . . . . . . : 131.193.141.103
Primary WINS Server . . . . . . . : 131.193.141.59
Secondary WINS Server . . . . . . : 131.193.141.190

From Client PC:
C:\Documents and Settings\smalik2>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Smalik
Primary Dns Suffix . . . . . . . : vcsa.uic.edu
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : cc.uic.edu
uic.edu

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit
Cont
roller
Physical Address. . . . . . . . . : 00-13-72-85-BE-57
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 131.193.141.145
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 131.193.141.1
DNS Servers . . . . . . . . . . . : 131.193.141.103
131.193.141.215
Primary WINS Server . . . . . . . : 131.193.141.190
Secondary WINS Server . . . . . . : 131.193.141.59

C:\Documents and Settings\smalik2>

Thanks for your help.

 

[Meinolf Weber [MVP-DS]]

Hello Sarfraz,

On the servers add the other DNS as the secondary on the NIC. For the client,
why did they have cc.uic.edu on there DNS suffix search list, not your domain?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[Dhruv raj]

pleae increase the diagnostic loging for Directory services by changint
following registery keys to 1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics

10 Performance Counters
13 Name Resolution

and you might wanna take help of netmon tool
to check the time that dc is taking to respond to the clinet logon request

also check the perfmon tool to check the performance of the dc
please chose approprite counters