We upgraded to Win 2K3 AD resently. When users log in there is a 1-2 min. delay on the Applying Computer settings. How can we speed up the logon process?
Thank U,
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Are you using any logon scripts? and are they set to run synchronously?
If you are using login scripts set to run synchronously (you have to make this change) and the script is hanging at all you will experience this problem. Try removing any logon scripts one at a time and see if the problem is alleviated.
If you are using roaming profiles these are generally a bit slower to load.
Are you seeing anything in the event logs on the clients or DC?
Krompton
Are all of the group policies being applied?
Are you using DFS?
What about logon scripts I asked earlier?
Is the slow logon the same for everyone all the time, just some users or hit or miss in that a user may logon fine today and slow tomorrow?
If it is just some users is on a particular machine or the users account?
Krompton
You did not mention if you have checked the DNS servers. In a windows 2003 ad domain it is essential that your client workstations are using your server as their dns server otherwise those logon delays will occur. If you go to your start menu and choose run, then type cmd and press ok, you will get a command prompt. At the command prompt type IPCONFIG /ALL and verify that the DNS server is pointing to your win2k3 server.
DFS is a server role and something you would probably know was setup. You said you upgraded to AD 2K3; from what did you upgrade?
I'm not sure what you mean by the default script on w2k3. There is no logon scripts that are run except those that are added. What is this script supposed to do?
If it is all your machines it could be the logon script you mentioned or a setting in one of your GPOs set at the domain level. Again I would suggest disabling them one at a time even if it is only disabled for one machine for testing.
Krompton
Would you mind opening a command prompt on your server by going to to the start menu, choosing run, and typing cmd, then click ok
After you have the command prompt type IPCONFIG /ALL
Also do this on one of the workstations
Then post this information here, it will help in the diagnosis, you can edit out any personal information you don't want to post
Here is a microsoft article as well, I don't know if any of it applies to you:
http://support.microsoft.c
Have you added any machines that were not in your old Domain and are they slow as well? If not try doing a full new OS install on a test machine. Log into it with a local machine acct. Then try adding it to your domain see if logging on to it is just as slow as your other machines. If the new machine works well then there is probably a mismatch between GPO templates left over and you may need to upgrade the machines from the old domain. I thought this was supposed to be automatic but I have not done a migration personally.
Krompton
Lbello,
Verify the DHCP/DNS settings are being set properly. Do a release/renew on one of your clients to see how long it takes to refresh the DNS settings.
What kind of lease time are the IP addresses being given from your DHCP?
I still think you are having script/GPO issues. Here are some of my thoughts. Hope they help.
How many GPOs and login scripts do you have that each computer/user has to have applied? Don’t forget that if you have a large number of GPO’s processing them takes time which is one reason a Domain login is almost always slower.
If you do have a large number of GPOs remember that each setting left in the “Not Configured” state still gets processed and slows down the logon process. Since you are using Windows 2003 consider installing the Group Policy Management Console if you haven’t already. Using GPMC inspect each GPO and check the Settings tab. If there are “No settings configured” for either the computer or user section and that section is showing “Enabled” I suggest setting it to “Disabled” (which can be done from the Details tab). This means that the disabled section does not have to be evaluated as the machine/user logon. If you have a lot of GPOs this may help.
I would also run a Group Policy Results report against some of the machines to see if there are any problems. Another setting to check is the Maximum wait time for Group Policy scripts setting?
Good Luck,
Krompton
Business Accounts
Answer for Membership
by: lukecaPosted on 2006-10-19 at 12:34:27ID: 17768906
You need to make sure your windows XP machines have their primary dns set to the IP address of your win2k3 server.