Solved

Delay in Citrix Logon

Posted on 2007-11-29
10
2,019 Views
Last Modified: 2013-11-21
Im currently running win2k3 sp2 with Citrix 4.5.  Recently users started to get delays in launching published applications from any of the farm servers..  Ive verified AD and DNS.

Below is a Userv login Debug capture:

USERENV(1724.1728) 16:00:47:977 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(1724.1728) 16:00:47:977 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(1724.1728) 16:00:47:993 LibMain: Process Name:  \??\C:\WINDOWS\system32\winlogon.exe
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(1724.1728) 16:01:18:510 =========================================================
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: Entering, hToken = <0x420>, lpProfileInfo = 0x6e5d8
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: lpProfileInfo->lpUserName = <jmerg>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: NULL central profile path
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\CAN-TOR-DC2\netlogon\Default User>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: NULL server name
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: no thread token found, impersonating self.
USERENV(1724.1728) 16:01:18:526 GetInterface: Returning rpc binding handle
USERENV(278.294) 16:01:18:526 IProfileSecurityCallBack: client authenticated.
USERENV(278.294) 16:01:18:526 DropClientContext: Got client token 000009FC, sid = S-1-5-18
USERENV(278.294) 16:01:18:526 MIDL_user_allocate enter
USERENV(278.294) 16:01:18:526 DropClientContext: load profile object successfully made
USERENV(278.294) 16:01:18:526 DropClientContext: Returning 0
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(1724.1728) 16:01:18:526 CProfileDialog::Initialize : Cookie generated <7F1858A17424B4F1D8292A98EC32E1DD>
USERENV(1724.1728) 16:01:18:541 CProfileDialog::Initialize : Endpoint generated <IProfileDialog_BE024DD9B694240F3F3ACB11B62D4C4A>
USERENV(278.bf4) 16:01:18:541 IProfileSecurityCallBack: client authenticated.
USERENV(278.bf4) 16:01:18:541 LoadUserProfileI: RPC end point IProfileDialog_BE024DD9B694240F3F3ACB11B62D4C4A
USERENV(278.bf4) 16:01:18:541 In LoadUserProfileP
USERENV(278.bf4) 16:01:18:541 LoadUserProfile: Running as client, sid = S-1-5-18

The delay is between lines 3 and 4..

Has anyone seen this before ...

Cheers

John
0
Comment
Question by:jmergulhao
10 Comments
 
LVL 31

Expert Comment

by:Cláudio Rodrigues
ID: 20379877
Well couple questions:
1. Does it happen to all users?
2. Does it happen when connecting to any of the servers?
3. What is the size of such roaming profile?
4. Hopefully the roaming profile is not on a DFS share...

Claudio Rodrigues

Microsoft MVP
Windows Server - Terminal Services
0
 

Author Comment

by:jmergulhao
ID: 20383351
answers:

1. Yes to all users.
2. All servers
3. Using local profiles not roaming
4. I do have some roaming profiles on DFS but not on Citrix.. Whats the issue with DFS and roaming profiles on citrix..

thx for the quick response..

Cheers

John
0
 

Author Comment

by:jmergulhao
ID: 20399174
anybody have any ideas on this issue..?
0
 

Expert Comment

by:stefglas
ID: 20446414
John,

I'm experiencing the same issue with Citrix Access Essentials 2, using the classic Citrix destop (not published apps) and am seeing the same delay in the USERENV log. Basically it hangs at "checking credentials" for about 15 - 20 secs and the continues logging in. This is the same for RDP and ICA, as well as "normal" users and the administrator. I have spent a couple of hours searching - but without any luck. If you have any further progress I am keen to know more details - will post if/as soon as I have more. (1 yes all users, 2 only the Citrix server, 3 and 4 local profiles only).

Cheers,

Mark
0
 

Author Comment

by:jmergulhao
ID: 20447176
stefglas:

Ive managed to isolate the delay to incorrect home drive path settings in the users AD properties for  the Terminal Services profile tab.. When the user launched the app citrix hung on trying to connect to incorrect folder settings and permissions in the Terminal Service profile settings.  Once i correct the entries for all users delay went away and normal logon delay occured..

This is probably not your problem but worth a AD profile settings review..

Hope that helps..
John
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 

Expert Comment

by:stefglas
ID: 20453334
John,

We are using local profiles on the Citrix machine - so my guess is that you are correct and this is another issue. However, thanks for the fast response. Will let you know when I find something.

Mark
0
 

Author Comment

by:jmergulhao
ID: 20458805
Are you using Group policy loopback processing mode on you citrix servers.


0
 

Expert Comment

by:mvandenberg
ID: 20463460
John,

yes thats correct - I'm using loopback processing. Any specific thoughts on that?

Mark
0
 

Expert Comment

by:pjhubbard
ID: 20637924
jmergulhao,

We too are having the same issue.  What would loopback processing have to do with it?

Thank,

Phil
0
 

Accepted Solution

by:
jmergulhao earned 0 total points
ID: 20638562
Sorry for the delay, ive been away..

Phil,

Originally i wasnt sure if Mark had loopback processing turned on..

Ive also seen problems with slow logon when mapping drives using DFS ..

Cheers

John
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

This article will show you how to create an ISO CD-ROM/DVD-ROM image (*.iso), and MD5 checksum signature, for use with VMware vSphere Hypervisor 6.5 (ESXi 6.5). It's a good idea to compare checksums, because many installations fail because of a corr…
In this article, I will show you HOW TO: Suppress Configuration Issues and Warnings Alert displayed in Summary status for ESXi 6.5 after enabling SSH or ESXi Shell.
Teach the user how to delpoy the vCenter Server Appliance and how to configure its network settings Deploy OVF: Open VM console and configure networking:
This video shows you how to use a vSphere client to connect to your ESX host as the root user. Demonstrates the basic connection of bypassing certification set up. Demonstrates how to access the traditional view to begin managing your virtual mac…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now