Win2k Advanced Server Client Login Hangs

Do you enable roaming profile? Many users have big My Documents, those files would be copied to theirs computers while logging in. (But 35 minutes is too long.)

Hi,
Thanks for your comment,
I did not add roaming profiles, this is actually the first workstation to login to the domain. No other users have used it..

Check the event viewer on the workstation and the server and relay any error messages that occur during the login attempt.

hi what source would the event be from for a remote login?

thanks,
- lenny

Hi,
I have found two logs in the event viewer on both the server and the workstation under the same username.

They both are:

The Remote Access Connection Manager service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Update:

It is now only hanging at "Loading Your Personal Settings"...

I have tried deleting the c:\Documents and Settings\Profile* and relogging in but it makes no difference. I recreated the account in AD so nothing has been changed...

- Lenny

Hi everyone, I have been working on this non-stop all night and I figured I would post all the information i can tonight before I go to bed, hoping someone will have some suggestions tommorow.


Ok here is all of my network, server, client information (domains and IP addresses changed ofcourse..)

Ok,

Windows 2000 Advanced Server > 192.168.0.4 (dns name= diego.com)
Active Directory, DHCPd, DNS, and Citrix Metaframe. All working, I included citrix metaframe to let you know that this is working properly from both the client and server side, meaning that citrix is able to pick up AD users and groups and security dependencies for published applications.

Router (to Internet) > 192.168.0.3 (working fine on all systems)

Client > DHCP (dns name= lenny.diego.com)
IP Config /all =
 Dhcp Enabled. . . . . . . . . . . : Yes
 Autoconfiguration Enabled . . . . : Yes
 IP Address. . . . . . . . . . . . : 192.168.0.150
 Subnet Mask . . . . . . . . . . . : 255.255.255.0
 Default Gateway . . . . . . . . . : 192.168.0.3
 DHCP Server . . . . . . . . . . . : 192.168.0.4
 DNS Servers . . . . . . . . . . . : 192.168.0.4
 Lease Obtained. . . . . . . . . . : Monday, June 23, 2003 12:17:10 AM
 Lease Expires . . . . . . . . . . : Tuesday, July 01, 2003 12:17:10 AM

Note: This workstation can ping the server by dns name (ping diego.com)
Also Note: The Win2K server can ping this workstation by Dns name (ping lenny.diego.com)

I have been reading, and most of these issues are caused by dns problems, but I can't figure out why there would be any sort of dns problem. It is only stalling at "Loading Personal Settings" but I have waited up to 35 minutes before it has logged in fully.

Any more tests? or suggestions?

thanks!
- lenny

Here is a copy of the errors I am getting on the server's event log:

"Registration of the DNS record '_kpasswd._tcp.diego.com. 600 IN SRV 0 100 464 diego.diego.com.' failed with the following error:
DNS operation refused.  "

"Registration of the DNS record 'b3c1ae29-a190-4342-b1c9-d7e086e666f2._msdcs.diego.com. 600 IN CNAME diego.diego.com.' failed with the following error:
DNS RR set that ought not exist, does exist.  "

"Registration of the DNS record '_ldap._tcp.d911fa22-08fc-4555-bb89-041282a72c22.domains._msdcs.diego.com. 600 IN SRV 0 100 389 diego.diego.com.' failed with the following error:
DNS operation refused.  "

I have noticed that there are entries in the above errors for "diego.diego.com" this isnt a hostname on my network, and is not pingable.. Could that be the problem? If so, does anyone know what the above errors mean and how i can change that?

thanks for all the help!
- bed time, will check again tommorow morning!

lenny

Does your domain controller also act as the DNS server? If this is the case, my first suggestion would be to make sure that your domain controller points to itself for DNS name resolution. Also, change the setting in DNS to "Allow Dynamic updates" and see if that works. If neither of those help, then here are some more leads:

http://www.eventid.net/display.asp?eventid=5774&eventno=353

http://support.microsoft.com/?kbid=284963

Hi,
I did double check that the server's dns points back to itself..

But i am noticing one thing, when i am on the server and try to ping the client workstation by it's dns name (lenny.diego.com) it takes about 30-45 seconds before it starts pinging. Almost like it is trying to resolve it, then it finally does and it pings fine....

anything that can fix this? i think this may be the issue because when I try to login to the workstation on the domain the server can't resolve the workstation right away??
maybe? im not sure...

any ideas would be great and appreciated!

thanks,
- Lenny

Also:

IM getting these errors in my server's event logs now:

Dynamic registration or deregistration of one or more DNS records failed because no DNS servers are available.

Configure the Netlogon service to depend on the DNS service. This will cause the Netlogon service to start after the DNS service starts. To do this, run REGEDT32, and go to:  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon

In the right pane, double-click the value DependOnService and add DNS to the next available blank line. Click OK and exit Registry Editor.

http://support.microsoft.com/?kbid=193888

thanks you got it! I recreated the zone... (This wasn't the first time Ive done this though...)

Thanks to all who helped! its now working!

- Lenny