Very Slow Login

[Craig N.]

I am having a problem where it takes about 5 minutes for
several workstations to log onto my domain, whereas
several other workstations work just fine.

I have tested the DNS, and it appears fine. It seems to
log in, but sits at "applying your personal settings", and
it sits there for a good 5 min. I logged a roaming profile
onto one machine and it fixed the problem, but wont fix
the others.

I DO NOT have roaming profiles, just one I use for
testing, so these are all local accounts.

Any ideas?

-Thnaks

 

[Oli Restorick [MVP]]

Hi

Rather than saying that your DNS is fine, it would help if you could
describe it or, better yet, post "ipconfig /all" outputs for an affected
workstation and all your domain controllers.

My first thought was that you have a DNS problem.

Anyway, have a look through the following TechNet Support WebCast that
describes how to use UserEnv logging.

TechNet Support WebCast: Troubleshooting Group Policy and profile issues in
a domain environment by using Userenv logging
http://support.microsoft.com/default.aspx?scid=kb;en-us;835302

Here's a related KB article

How to enable user environment debug logging in retail builds of Windows
http://support.microsoft.com/default.aspx?scid=kb;EN-US;221833

Note that, as the WebCast points out, it's usual to see warnings and error
codes in the log. If you have trouble decyphering the logs, post back to
the newsgroups.

Incidentally, your post is confusing. First you say that the workstation is
taking a long time to log into the domain (yes, workstations actually log in
as well as users) and then you say that the user is taking a long time.
Next, you say that they're logging into the domain, but at the end you say
that they're local accounts. Do you mean that they are domain accounts with
local profiles? That is not the same as a local account.

Hope this helps

Oli

 

[Guest]

Sorry if it was confusing, been a rough day. Anyways, the
computer logs on fine, but when I go to log in a user, I
type in the username and password, and it goes to
the "applying your personal settings" screen, which
normally lasts a few seconds, except that here, it lasts
about 5 minutes.

I dont see how it cn be DNS, because its not stuck on the
login screen, its stuck at "applying your personal
settings", what is the computer doing while it says that?

 

[Leythos]

Sorry if it was confusing, been a rough day. Anyways, the
computer logs on fine, but when I go to log in a user, I
type in the username and password, and it goes to
the "applying your personal settings" screen, which
normally lasts a few seconds, except that here, it lasts
about 5 minutes.

I dont see how it cn be DNS, because its not stuck on the
login screen, its stuck at "applying your personal
settings", what is the computer doing while it says that?

In my experience it's either DNS or redirected folders that contain
LARGE FILES that are being copied across a slow network connection.

 

[Ace Fekay [MVP]]

In

Sorry if it was confusing, been a rough day. Anyways, the
computer logs on fine, but when I go to log in a user, I
type in the username and password, and it goes to
the "applying your personal settings" screen, which
normally lasts a few seconds, except that here, it lasts
about 5 minutes.

I dont see how it cn be DNS, because its not stuck on the
login screen, its stuck at "applying your personal
settings", what is the computer doing while it says that?

Please confirm that your ISP's DNS addresses are not being used on any of
your internal machines.


Actually, 99% of the time this condition is caused by using your ISP's DNS
addresses in your DCs' and clients' IP properties. Need to only use your
internal DNS only. Configure a forwarder for efficient Internet resolution.
See this article on how to configure a forwarder:
http://support.microsoft.com/?id=300202

FYI, for more info on AD and its DNS requirements:
291382 - Frequently Asked Questions About Windows 2000 DNS and Windows
Server 2003 DNS:
http://support.microsoft.com/?id=291382

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.

 

[Trust No One®]

I am having a problem where it takes about 5 minutes for
several workstations to log onto my domain, whereas
several other workstations work just fine.

I have tested the DNS, and it appears fine. It seems to
log in, but sits at "applying your personal settings", and
it sits there for a good 5 min. I logged a roaming profile
onto one machine and it fixed the problem, but wont fix
the others.

I DO NOT have roaming profiles, just one I use for
testing, so these are all local accounts.

Is a WAN link involved?

If so you may need to force Kerberos to use TCP instead of UDP

http://support.microsoft.com/default.aspx?scid=kb;en-us;244474

With some of our WAN links (not all) this setting is necessary on some
workstations to resolve extremely long log in times. It seems to affect
workstations (usually laptops) with older versions (below 3.6) of the Cisco
VPN client software.

I've also seen similar problems when some required ports (e.g. 135) have
been blocked by overzealous Network technicians

If a WAN link is not involved then the problem more than likely lies with
your DNS, as already pointed out by several earlier respondents.

 

[Ace Fekay [MVP]]

In

Is a WAN link involved?

If so you may need to force Kerberos to use TCP instead of UDP

http://support.microsoft.com/default.aspx?scid=kb;en-us;244474

With some of our WAN links (not all) this setting is necessary on
some workstations to resolve extremely long log in times. It seems to
affect workstations (usually laptops) with older versions (below 3.6)
of the Cisco VPN client software.

I've also seen similar problems when some required ports (e.g. 135)
have been blocked by overzealous Network technicians

If a WAN link is not involved then the problem more than likely lies
with your DNS, as already pointed out by several earlier respondents.

Good point. In order to determine if this applies to this scenario, we need
to get a couple outputs:

netdiag /v /fix > c:\netdiag.txt
dcdiag /v > c:\dcdiag.txt

As well as any errors in the Event viewer.

But for right now, it maybe prudent to determine if its just a simple IP
properties DNS misconfiguration before we change anything in the reg.



Cheers!


--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.

 

[Ace Fekay [MVP]]

In

Sorry if it was confusing, been a rough day. Anyways, the
computer logs on fine, but when I go to log in a user, I
type in the username and password, and it goes to
the "applying your personal settings" screen, which
normally lasts a few seconds, except that here, it lasts
about 5 minutes.

I dont see how it cn be DNS, because its not stuck on the
login screen, its stuck at "applying your personal
settings", what is the computer doing while it says that?

Also to add, if you can provide us with an unedited ipconfig /all from one
of your DCs and from one of your clients, that will help to eliminate some
of the basic configs and help diagnose this for you.



--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.

 

[Guest]

-----Original Message-----
I am having a problem where it takes about 5 minutes for
several workstations to log onto my domain, whereas
several other workstations work just fine.

I have tested the DNS, and it appears fine. It seems to
log in, but sits at "applying your personal settings", and
it sits there for a good 5 min. I logged a roaming profile
onto one machine and it fixed the problem, but wont fix
the others.

I DO NOT have roaming profiles, just one I use for
testing, so these are all local accounts.

Any ideas?

-Thnaks
.

Slow logins can also be cause by the workstations Secure
Channel being pointed to a DC that is not "local".NLTEST
is a Support Tool that can be used to diagnose this
behavior. NLTEST /SC_QUERY:domainx will tell you which DC
the workstation is talking to. /SC_RESET:domainx will
generally bring it back.

Michael