Avatar of JohnG316
JohnG316

asked on 

Windows Server 2003 - Recommended Performance Tweaks

In our new installation, we have a number of performance problems from file access to program access to Internet access.  I've found a few miscellaneous tweaks here and there, but is there a list of recommended tweaks we can make to policies and registries to improve performance?
Windows Server 2003

Avatar of undefined
Last Comment
JohnG316
Avatar of luv2smile
luv2smile

Well what exactly do you mean by "improve performance"? Do you mean to speed things up? Are you talking about security?

What kind of problems are you having?....if you tell us a specific problem then maybe we can help give you more of a specific answer.
Avatar of cfairley
cfairley
Flag of United States of America image

Hello JohnG316,

I think you will like this link, it's very realistic.

http://techrepublic.com.com/5104-6242-5111581-2.html
Avatar of JohnG316
JohnG316

ASKER

Speed things up is the first issue.

We were on NT and upgraded to 2003.  Before, the access to the network shares was reasonably quick.  Now, we experience 30-45 second delays when accessing the shares, loading files, and accessing websites.  I have our local DNS setup as the first DNS link, with an Internet access DNS address as the secondary.  Beyond the basic setup during installation, I have not done anything to the DNS.  i know this is central to 2003, so perhaps the source of the problem is here.  We have a WINS server running and I have put our server names in as static maps.
Avatar of luv2smile
luv2smile

Are you getting any errors in your event logs?
Avatar of cfairley
cfairley
Flag of United States of America image

John, just want to make sure you saw the link above.  
Avatar of JohnG316
JohnG316

ASKER

cfairly, Yes, saw link above and am checking.
Avatar of JohnG316
JohnG316

ASKER

luv2smile

Not getting any errors in event logs
ASKER CERTIFIED SOLUTION
Avatar of Chris Dent
Chris Dent
Flag of United Kingdom of Great Britain and Northern Ireland image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of JohnG316
JohnG316

ASKER

First problem found ...

5. Reverse Lookup Zones
None exists.
To create one, I assume I do a primary, to all DC's in the AD Domain.  For the network ID, assuming that our domain IP address range is 192.168.1.0 and the DC address is 192.168.1.230, what address do I put here?
Avatar of JohnG316
JohnG316

ASKER

Too tired yesterday to think.  I set up the Reverse Lookup Zone with 192.168.1 and created a PTR record to the DC.

As you outlined above, the testing worked and Internet access is OK.

On a station I tested, I still find that telnet application takes about 10-15 seconds to respond (it routes through our default router to our UNIX system) and another application that accesses an app on a server in our DMZ takes 30-45 seconds to respond.  Are there other tweaks I can do to speed up this response?


Avatar of cfairley
cfairley
Flag of United States of America image

John,

If you have not already, I would disable SMB signing, if you do not need it.

http://www.jsiinc.com/SUBB/tip0900/rh0992.htm
Avatar of JohnG316
JohnG316

ASKER

SMB signing is already disabled.
Avatar of Chris Dent
Chris Dent
Flag of United Kingdom of Great Britain and Northern Ireland image


For the telnet application, how do you access it? Via name or via IP?

Does the speed problem occur with both methods?
Avatar of JohnG316
JohnG316

ASKER

IP only
Avatar of Chris Dent
Chris Dent
Flag of United Kingdom of Great Britain and Northern Ireland image


That's a shame ;)

How about authentication, does it authenticate through the windows domain?
Avatar of JohnG316
JohnG316

ASKER

No, the UNIX system is independent of the domain.  
Avatar of Chris Dent
Chris Dent
Flag of United Kingdom of Great Britain and Northern Ireland image


I would be inclined to say it's something to do with the Firewall... but you didn't have these problems before?
Avatar of JohnG316
JohnG316

ASKER

Not to this degree.  I did adjust the firewall at the XP box and checked file/print sharing and that helped.

I have another issue with the domain which could be affecting performance.  We inadvertanly put in the domain with a .com suffix instead of .local.  Could this be causing delays as well?  I'm looking into renamng the DNS domain.
Avatar of Chris Dent
Chris Dent
Flag of United Kingdom of Great Britain and Northern Ireland image


Not too likely to, the only problems caused by use of the .com domain suffix (or any other public suffix) internally are to do with a requirement for duplicate public entries.

That is, if your ISP hosts an address for you on their DNS you would have to add a version of that to your local DNS to allow it through.

Have you tried the same connection with the XP Firewall disabled? Also, have you tried the same connction with a PC that isn't a domain member?

If you're renaming the DNS domain (internally) you'd also have to rename the AD domain name. The process isn't pretty, but you can find the tool and the relevant documentation in the link below. The documentation is long, but you would need to cover it in detail for this change.

http://www.microsoft.com/windowsserver2003/downloads/domainrename.mspx
Avatar of JohnG316
JohnG316

ASKER

Thanks for your help on these issues.  I still have some outstanding connectivity issues and I'll work those through, but this thread started to go in a tangent different then the initial request and I wanted to accept it out before it went too far
Windows Server 2003
Windows Server 2003

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

129K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo