Slow login on Win2000S/AD

[Bjørnar]

Hello,


We recently upgraded from NT4S to Win2000S with AD and are
experiencing a great slowdown of the loginprocess from the
clients.

More precicely, the autentication stage (right when you
type in the password) hangs for almost a minute, changing
to "loading userprofile" in a very slow fashion.

After that everything seems normal, and the loginscript
mapping the network drives runs at normal speed.

Anyone have any idea what could be wrong?


DNS and WINS (because of old NT4 clients) is set to
the new Win2000 server.

Also lmhost is set up like this on the clients:

193.xxx.xxx.xxx W2KSRV #PRE #DOM:NTDOM

DHCP, however, are Linux boxes because of a VLAN setup.



Also I would appreciate any tip as to how to troubleshoot
this as I'm not that familiar with Active Directory.

Thank you very much for any help.



Regards...

 

[Matjaz Ladava [MVP]]

Sometimes http://support.microsoft.com/default.aspx?scid=kb;en-us;244474
helps with slow logons. Another one would be DNS, so check, that your
clients can resolve srv records from your internal DNS server. Use nslookup
to verify that.

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

 

[Justin Musick]

Agreed, my experiences lead to DNS problems.

jM

Sometimes http://support.microsoft.com/default.aspx?scid=kb;en-us;244474
helps with slow logons. Another one would be DNS, so check, that your
clients can resolve srv records from your internal DNS server. Use nslookup
to verify that.

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

 

[Andrew Bullock]

I just had the same problem, DNS.



Andrew Bullock

 

[Shane Brasher]

Hello All,

Usually the slow logons are in relation to a mis-configured AD/DNS server.
Below are some general setup steps with a AD/DNS server.
((((((((((((((((((((((

Active Directory with DNS on the same server.

TCP/IP settings

1.)Right click "My network places" and select properties.
2.)For the LAN connection right click and select properties.
3.)On the properties page double click TCP/IP
4.)At the bottom of the protocols page select Preferred DNS Server option
and enter the IP address for the server itself.
5.)Click the advanced button. In the advanced setting make sure the
"Register this connection's address in DNS" selection is checked at the
bottom of the display.

DNS settings

1.)Open up the DNS console.
2.)Once opened, right click on the server in the right hand pane and select
properties.
3.)Once the properties page is up, select the "Forwarders" tab.
4.)Check the "Enable forwarders" selection at the top.
5.)Add the IP address of the DNS in which to forward requests. If this is
the only DNS , add the IP address for the ISP's DNS. (note- In the TCP/IP
settings, we selected the choice for DNS to point to itself. If name
resolution cannot be resolved then a request is made to the forwarders. If
resolution cannot be made via the internal DNS and there are no forwarders
listed, then resolution will be made via the root hints.
6.)Click OK.
7.)Expand the "Forward Lookup Zones"
8.)If there is a folder with a dot "." listed then delete it. (note- This
indicates to the server that it is the root server, which means do not go
beyond this server for name resolution.)
9.)Right click the domain folder and select properties. Make sure that
"Allow dynamic updates is selected."

Close out the DNS console.

Open up a command prompt and type the following:

1.)At the prompt type ipconfig /flushdns and wait for the services to
flush.
2.)ipconfig /registerdns wait for the services to regiser.
3.)net stop netlogon
4.)net start netlogon

If you receive an error during this process go to control panel, admin.
tools, services. Make sure the DHCP client service is started, even if
they are not using DHCP they still need the service started. Once all of
this is done. Open the DNS console again. Expand the forward lookup zones,
then expand the domain folder. You should see the underscore folders below:

_msdcs
_sites
_tcp
_udp
))))))))))))))))

Additional T-shooting

To install the Windows 2000 Support tools:
1. Insert the Windows 2000 CD-ROM.
2. Browse to Support\Tools.
3. Run Setup.exe in this folder.
4. Select a typical installation. The default installation
path is <Systemdrive>:\Program Files\Support
Tools.
Navigate to that directory via command prompt and type:

"netdiag /v" and then enter. This will run a diagnostic on the server as
far as DNS registration, WINS registration, netbios cache, hotfixes etc....
Type in "dcdiag /v" This will run a AD diagnostics for you to reference as
well.


Shane Brasher
MCSE (2000,NT),MCSA, A+
Microsoft Platforms Support
Windows NT/2000 Networking