Solved

Login takes much time

Posted on 2006-10-26
9
200 Views
Last Modified: 2010-04-18
Hi experts,

Recently I have installed windows 2003 server. I added the 2 workstation in to the domain but I donno why it is taking much time to authenticate .

I think my problem is something related to DNS. Here is the link I was looking at, but was not sure how to do it.
 http://www.experts-exchange.com/Operating_Systems/Windows_Server_2003/Q_21455799.html?query=windows+authentication+is+too+slow&topics=666

The problem seems to be same as mentioned in the above link. I would greatly appreciate if someon could help me resolve this issue.

Thanks,
Sundeep.
0
Comment
Question by:sundeepgopal
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 3
9 Comments
 
LVL 3

Author Comment

by:sundeepgopal
ID: 17809908
The DNS is set to 127.0.0.1   is this ok ??
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 17810173
The DNS on the server should point to itself as it should (will) be running DNS active directory integrated assuming you are running a domain, I use the IP address of the server, others use 127.0.0.1 but consensus tends to be use the server's real IP.  Don't put ANY other DNS server IP addresses in there unless you have another AD server running DNS too.

Your clients should point only for DNS to the server's IP address, generally using a DHCP server to push out the settings.

You then setup forwarders in the forwarders tab of the properties of the DNS server in DNS management console to point to two or more DNS server addresses supplied by your ISP.

That *should* be it.

Ask if not sure.

Steve
0
 
LVL 3

Author Comment

by:sundeepgopal
ID: 17812522
hey Steve,

It already has the forwardings. I don't know why it is so slow while logging in.  
here is the figure  of DNSmang console properties......
http://www.phys.lsu.edu/~sundeep/DNSmang.JPG

I guess I made some mistake in domain name assigning.  Mycomputer name is fserver and the domain name is mainoffice.phys. So i can see the full name of the computer as fserver.mainoffice.phys , while most of the computer's fullname in the department look like "mac.phys.nmsu.edu" . do you think  i need to change it to something different??
please give me some ideas

Thanks

Sundeep.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 3

Author Comment

by:sundeepgopal
ID: 17812539
>>>>Your clients should point only for DNS to the server's IP address, generally using a DHCP server to push out the settings.

Could you please let me know how to do that ??



0
 
LVL 3

Author Comment

by:sundeepgopal
ID: 17812633
When i do nslookup I get

****************************
> nslookup mserver.phys.nmsu.edu
Server:         130.39.3.10
Address:        130.39.3.10#53

Name:   mserver.phys.nmsu.edu
Address: 130.29.10.17
*******************************

This is the name that has been assigned to the ethernet. As you can see the computer name is different from this name.  
Any mistake??

0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 17812679
Please explain the IP of your server, the workstation and the dns server currently defined for each.

The workstations should have the dns server entry in tcpip properties of network card set to the server in the domain they login to unless this is part of a bigger organisation ...

Will look back later. Off now
Steve
0
 
LVL 3

Author Comment

by:sundeepgopal
ID: 17813247
SERVER:
ip address 130.29.10.17
subnet mask  255.255.252.0
gateway       130.29.10.1

DNS 127.0.0.1

Here is the figure after going to advanced properties ....please zoom in to see it ...

http://www.phys.lsu.edu/~sundeep/untitled1.BMP

On the client I did not change  anything , here is the ip settings on the client machine

http://www.phys.lsu.edu/~sundeep/untitled2.bmp

thanks
0
 
LVL 43

Accepted Solution

by:
Steve Knight earned 500 total points
ID: 17814870
OK.  Is this server a domain controller of your own for your own domain? Is this part of a forest on the rest of the site or just your own seperate one? If so then from you setup there is it clear what is wrong.

Server.  IP 130.29.10.17.  Subnet mask 255.255.252.0   Gateway 130.29.10.1  DNS 130.29.10.17
PC. IP 130.29.10.18 subnet mask 255.255.252.0  gateway 130.29.10.1  DNS 130.29.10.17

On Server.  In properties of DNS the server go to the forwarders tab. Add in 130.29.3.5 an 130.29.244.30 to forward on any request to presumably the DNS servers for the rest of the site.

Unless you have another AD server running the DNS for your domain do NOT add another DNS server to the clients.  They must ONLY have ones that point at your domain.

Try that for now, I think it should be OK, if not let me know.

Steve
0
 
LVL 3

Author Comment

by:sundeepgopal
ID: 17816261
Thanks steve,

it seems to work fine using the following configuration
Server.  IP 130.29.10.17.  Subnet mask 255.255.252.0   Gateway 130.29.10.1  DNS 127.0.0.1
PC. IP 130.29.10.18 subnet mask 255.255.252.0  gateway 130.29.10.1  DNS 130.29.10.17

but  got a problem with the firewall, when I turn on the windows firewall it again does the same thing , takes atleast 3 mins to login

any ideas??

thanks
Sundeep.
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question