?
Solved

XP clients slow loading personal settings, Exchange installation/configuration, MX Records ???????

Posted on 2007-07-23
4
Medium Priority
?
409 Views
Last Modified: 2012-05-05
Hi,  
I've just finished setting active directory on a Windows 2003 server.  
***For some reason when the clients  join the domain, it's taking 10 to 15 minutes to load a personal profiles.   This is happening EVERY TIME a user logs in.  I think local profile and domain profiles are conflicting.  Any ideas how I can fix this.    I ran dcdiag and Netdiag and  no errors, all passed.    
***My second part is planning for Exchange installation,  this is the first and I wanna do it right.   Any tips and bits will be greatly appreciated.  Especially setting up the MX Records and the basic preparation.
***Final question;  can exchange and AD be installed on the same partition or different partition on the same server.   Microsoft recommends setting up two exchange servers, does this depend on the size of the company?  We've less than 100 users but might increase soon.      Let know me if you need more info.
Any manuals or web links are appreciated.

Thanks
0
Comment
Question by:timnjohnson
  • 2
4 Comments
 
LVL 3

Expert Comment

by:DCProfessional
ID: 19553425
First: That is generally from a large profile being loaded or DNS issues. Is the domain controller the primary dns for the machines? In active directory, are they using local or remote (roaming) profiles??

Second: is this an SBS or standard server? With MX records make sure the rDNS (Resolving IP to a host name) matches the MX record (EG, mail.yourcomapny.com points to IP 12.34.56.78 and 12.34.56.78 reverses to mail.yourcompany.com ) if they don't, then you will be rejected by a lot of ISP mail servers. Also, make sure to only allow relying from specified addresses. It's under the exchange manager, connectors, default (maybe virtual) smtp connector, right click and hit properties, (security? i think) and then relay) This setting only allows mail to be sent from whitelisted IPs only -- prevents spammers from using your mail server.

Last: I would recommend it being on it's own server -- mainly because if it isn't an SBS box I don't find having exchange and ad on the same machine. The two servers is mainly for load balancing and redundancy. Exchange can take a major toll on a servers resources...so thats another good reason to have it on it's own box.

For a company your size, it should be fine on an single exchange server.
0
 

Author Comment

by:timnjohnson
ID: 19553534

(1)- Is the domain controller the primary dns for the machines? Yes.  
(2) -In active directory, are they using local or remote (roaming) profiles?  I would like to use domain profile rather local profile....I just need to find out how to change to domain profile.  
(3)-Second: is this an SBS or standard server? It's Windows 2003 Enterprise server.
(4)- With MX records make sure the rDNS (Resolving IP to a host name) matches the MX record (EG, mail.yourcomapny.com points to IP 12.34.56.78 and 12.34.56.78 reverses to mail.yourcompany.com ) if they don't, then you will be rejected by a lot of ISP mail servers.   Is this (12.34.56.78 and 12.34.56.78) a standard IP address for Exhange?   Our AD is also our Primary DNS Server....I have our local DNS, our public domain and ISP ip address.  When it comes to Exchange how  do you  group these pieces?  
A bit new with Exchange but I'll get there.
0
 
LVL 23

Assisted Solution

by:ormerodrutter
ormerodrutter earned 1200 total points
ID: 19554808
Tim,

The first thing I would suggest you to look at is the DNS settings. If you are using fixed IP addresses for client workstations make sure the Preferred DNS server is your DC; if you are using DHCP then the Preferred DNS server is set within your DHCP scope.

Its Roaming Profiles that you are talking about. Roaming Profile has its own pros and cons. Good thing about Roaming Profile is that user gets his/her own settings (desktop, printers, shares etc) no matter which workstations he/she logs onto. Bad thing is the time taken when logging on and off because everything Windows updates the profile which is stored in the network. If your users tend to logon from different PCs then you need to configure Roaming Profiles otherwise local profile would be ideal (and less to manage).

Exchange - You need to ensure that your exchange server do not relay (unless you are absolutely sure you want to) otherwise your emails could be rejected by many ISPs. Also, as DCPro stated you need to ensure your Reverse DNS record is set correct. Talk to your ISP for MX record and Reverse DNS record. ISPs such as AOL will not accept emails that are sent from server with incorrect DNS record.

However you can overcome this by setting up a Smart Host within the smtp connector (which means routing all your outgoing emails to your ISP through their servers). Also, depending on which protocol you want to retrieve your emails. IF you tend to use POP3 then you don't need to worry about your MX record.

A good guide about Installing and Configuring Exchange 2003 :- http://technet.microsoft.com/en-us/exchange/bb288525.aspx

If you have 100 users and growing, I suggest you getting the Enterprise edition mainly due to it capability of large database size. Have a look the detail should be in the link.
http://en.wikipedia.org/wiki/Microsoft_Exchange_Server#Exchange_Server_2003

Best not to put Exchange on the DC - it is NOT recommended by Mircosoft because you might experience problem with replication. And you only need one exchange server unless you are very keen
to provide fault tolorence and load balancing.
0
 

Accepted Solution

by:
timnjohnson earned 0 total points
ID: 19555436


I'm having a major DNS issues and need some help on this.
My workstations are having a major problems loading personal profiles.. and also selecting a domain list
in taking more than 5 minutes, yet we've only one DC.  local logins are taking seconds but domain logins are over ten minutes.  Somebody mentioned dns and I
think that is the case here.
Please look at the DCDIAG and NETDIAG all run from
the DC and the DNS issues config and errors below.
Thanks.




Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>CD\

C:\>DCDIAG

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\BIOMED
      Starting test: Connectivity
         ......................... BIOMED passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\BIOMED
      Starting test: Replications
         ......................... BIOMED passed test Replications
      Starting test: NCSecDesc
         ......................... BIOMED passed test NCSecDesc
      Starting test: NetLogons
         ......................... BIOMED passed test NetLogons
      Starting test: Advertising
         ......................... BIOMED passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... BIOMED passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... BIOMED passed test RidManager
      Starting test: MachineAccount
         ......................... BIOMED passed test MachineAccount
      Starting test: Services
         ......................... BIOMED passed test Services
      Starting test: ObjectsReplicated
         ......................... BIOMED passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... BIOMED passed test frssysvol
      Starting test: frsevent
         ......................... BIOMED passed test frsevent
      Starting test: kccevent
         ......................... BIOMED passed test kccevent
      Starting test: systemlog
         ......................... BIOMED passed test systemlog
      Starting test: VerifyReferences
         ......................... BIOMED passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : XYZ.com
      Starting test: CrossRefValidation
         ......................... XYZ.com passed test CrossRefValidation
      Starting test: CheckSDRefDom
         .........................  XYZ.com passed test CheckSDRefDom

   Running enterprise tests on :  XYZ.com
      Starting test: Intersite
         .........................  XYZ.com passed test Intersite
      Starting test: FsmoCheck
         .........................  XYZ.com passed test FsmoCheck

C:\>NETDIAG

....................................

    Computer Name: BIOMED
    DNS Host Name: biomed.XYZ.com
    System info : Windows 2000 Server (Build 3790)
    Processor : x86 Family 6 Model 7 Stepping 3, GenuineIntel
    List of installed hotfixes :
        KB924667-v2
        KB925398_WMP64
        KB925902
        KB926122
        KB927891
        KB929123
        KB930178
        KB931784
        KB931836
        KB932168
        KB933566
        KB933854
        KB935839
        KB935840
        KB935966
        KB936357
        Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

    Adapter : Local Area Connection

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : biomed
        IP Address . . . . . . . . : 192.168.1.3
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.1.1
        Dns Servers. . . . . . . . : 192.168.1.3


        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Passed

        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
            No remote names have been found.

        WINS service test. . . . . : Skipped
            There are no WINS servers configured for this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{FBE48C50-7A79-4CEC-89BC-5D2709B04A58}
    1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server '192.168.1.3'
.


Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{FBE48C50-7A79-4CEC-89BC-5D2709B04A58}
    The redir is bound to 1 NetBt transport.

    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{FBE48C50-7A79-4CEC-89BC-5D2709B04A58}
    The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
    No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

C:\>




DNS Warning Error 32:

The DNS server encountered error 32 attempting to load zone
xxx.com from Active Directory.  The DNS server will attempt
to load this zone again on the next timeout cycle.
This can be caused by high Active Directory load and
may be a transient condition.

Here is my DNS Config:
>I created a New Forward Lookup Zones
XYZ.com zone
+msdcs
+sites
+tcp
+udp
+DomainDnsZones
+ForestDnsZones

>Added My ISP as forwarders ( no local dns ip here)

Now Question:
>I two things going on here.
First I Comcast is my ISP for internet access.
Yahoo hosts my domain NAME XYZ.COM
On DNS Zone I'm using my XYZ.COM for the Zone name and
the same XYZ.COM for my Active Directory FQDN.
> When I ping my DC, the server name, the Netbois name
and XYZ.COM, I'm getting my yahoo domain IP ( 69.147.X.X)  
and instead of my ( 192.168.1.3) local dns

IPCONFIG SUMMARY from the client side:
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\TimJ>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : Bio-desk1
        Primary Dns Suffix  . . . . . . . : XYZ.com
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : XYZ.com
                                            medstar

Ethernet adapter Local Area Connection 4:

        Connection-specific DNS Suffix  . : medstar
        Description . . . . . . . . . . . : 3Com EtherLink XL 10/100 PCI TX NIC
(3C905B-TX)
        Physical Address. . . . . . . . . : 00-50-04-A0-7F-01
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.1.10
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.1.1
        DHCP Server . . . . . . . . . . . : 192.168.1.3
        DNS Servers . . . . . . . . . . . : 68.87.73.242 ( ISP Comcast)
                                                      68.87.71.226
        Lease Obtained. . . . . . . . . . : Tuesday, July 24, 2007 7:33:30 AM
        Lease Expires . . . . . . . . . . : Wednesday, August 01, 2007 7:33:30 A
M

C:\Documents and Settings\TimJ>ping Biomed

Pinging premium11.geo.yahoo9.akadns.net [69.147.X.146] with 32 bytes of data:

Reply from 69.147.X.X: bytes=32 time=97ms TTL=51
Reply from 69.147.X.X: bytes=32 time=101ms TTL=51
Reply from 69.147.X.X: bytes=32 time=98ms TTL=51
Reply from 69.147.X.X: bytes=32 time=99ms TTL=51

Ping statistics for 69.147.X.146:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 97ms, Maximum = 101ms, Average = 98ms

C:\Documents and Settings\TimJ>ping medstar

Pinging premium11.geo.yahoo9.akadns.net [69.147.X.154] with 32 bytes of data:

Reply from 69.147.X.154: bytes=32 time=94ms TTL=50
Reply from 69.147.X.154: bytes=32 time=94ms TTL=50
Reply from 69.147.X.154: bytes=32 time=95ms TTL=50
Reply from 69.147.X.154: bytes=32 time=96ms TTL=50

Ping statistics for 69.147.X.154:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 94ms, Maximum = 96ms, Average = 94ms

C:\Documents and Settings\TimJ>ping medstarcorp.com

Pinging medstarcorp.com [69.147.X.178] with 32 bytes of data:

Reply from 69.147.X.178: bytes=32 time=95ms TTL=50
Reply from 69.147.X.178: bytes=32 time=95ms TTL=50
Reply from 69.147.X.178: bytes=32 time=97ms TTL=50
Reply from 69.147.X.178: bytes=32 time=108ms TTL=50

Ping statistics for 69.147.X.178:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 95ms, Maximum = 108ms, Average = 98ms

C:\Documents and Settings\TimJ>ping Biomed

Pinging premium11.geo.yahoo9.akadns.net [69.147.X.146] with 32 bytes of data:

Reply from 69.147.X.146: bytes=32 time=99ms TTL=51
Reply from 69.147.X.146: bytes=32 time=112ms TTL=51
Reply from 69.147.X.146: bytes=32 time=100ms TTL=51
Reply from 69.147.X.146: bytes=32 time=99ms TTL=51

Ping statistics for 69.147.X.146:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 99ms, Maximum = 112ms, Average = 102ms

C:\Documents and Settings\TimJ>ping 192.168.1.3

Pinging 192.168.1.3 with 32 bytes of data:

Reply from 192.168.1.3: bytes=32 time<1ms TTL=128
Reply from 192.168.1.3: bytes=32 time<1ms TTL=128
Reply from 192.168.1.3: bytes=32 time<1ms TTL=128
Reply from 192.168.1.3: bytes=32 time<1ms TTL=128

Ping statistics for 192.168.1.3:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Documents and Settings\TimJ>
I really need help!
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Want to know how to use Exchange Server Eseutil command? Go through this article as it gives you the know-how.
As much as Microsoft wants to kill off PST file support, just as they tried to do with public folders, there are still times when it is useful or downright necessary to export Exchange mailboxes to PST files. Thankfully, it is still possible to e…
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses
Course of the Month16 days, 7 hours left to enroll

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question