Slow Domain Login

[Guest]

I have a Win2k Domain with a Win2k Pro SP4 wkstn. When logging in to the
domain it takes up to 4 minutes to connect. If I do not login to the domain
and only the local wkstn it happens immediately. The System Event Viewer for
the workstation reports the following: "The session setup to the domain
controller ###### for the domain ##### is not responsive. The current RPC
call from Netlogon on #### to ###### has been cancelled." Event ID is 5783,
source is Netlogon, and category is None. A search of the knowledge base only
returns info for wkstns running Norton anti-virus which we do not use.

 

[Jorge de Almeida Pinto]

sounds like DNS...
to what DNS servers are the clients pointing to? internal or ISP?
same question for servers

 

[Guest]

internal DNS servers and DC's. all win2k advanced server. we have over 2500
wkstns and only a select few are having this problem. All DNS info is passed
via DHCP. thanks...

 

[Jorge de Almeida Pinto]

any other event log errors?

have you tried a network trace?

 

[Guest]

no other errors and once logged in all services are normal. what kind of
network trace? can you provide the syntax please? thx...

 

[Jorge de Almeida Pinto]

you make a network trace using a tool like Etherreal or Packetyzer, or some
other network monitoring tool. With this you will see the traffic on the
network. Analyzing that might give you a hint what could be wrong/

You might also wanna look at:
http://www.eventid.net/display.asp?eventid=5783&eventno=1024&source=NETLOGON&phase=1

 

[Kurt]

Even so, it sounds like some kind of DNS related issue. When yo doan
nslookup for your domain name (just the domain - no host, like
"company.org") do you resolve to the address of one of your DCs? If so, do
all the "bad" boxes resolve to the same DC?

....kurt