Solved

Delay in Citrix Logon

Posted on 2007-11-29
10
2,027 Views
Last Modified: 2013-11-21
Im currently running win2k3 sp2 with Citrix 4.5.  Recently users started to get delays in launching published applications from any of the farm servers..  Ive verified AD and DNS.

Below is a Userv login Debug capture:

USERENV(1724.1728) 16:00:47:977 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(1724.1728) 16:00:47:977 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(1724.1728) 16:00:47:993 LibMain: Process Name:  \??\C:\WINDOWS\system32\winlogon.exe
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(1724.1728) 16:01:18:510 =========================================================
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: Entering, hToken = <0x420>, lpProfileInfo = 0x6e5d8
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: lpProfileInfo->lpUserName = <jmerg>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: NULL central profile path
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\CAN-TOR-DC2\netlogon\Default User>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: NULL server name
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: no thread token found, impersonating self.
USERENV(1724.1728) 16:01:18:526 GetInterface: Returning rpc binding handle
USERENV(278.294) 16:01:18:526 IProfileSecurityCallBack: client authenticated.
USERENV(278.294) 16:01:18:526 DropClientContext: Got client token 000009FC, sid = S-1-5-18
USERENV(278.294) 16:01:18:526 MIDL_user_allocate enter
USERENV(278.294) 16:01:18:526 DropClientContext: load profile object successfully made
USERENV(278.294) 16:01:18:526 DropClientContext: Returning 0
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(1724.1728) 16:01:18:526 CProfileDialog::Initialize : Cookie generated <7F1858A17424B4F1D8292A98EC32E1DD>
USERENV(1724.1728) 16:01:18:541 CProfileDialog::Initialize : Endpoint generated <IProfileDialog_BE024DD9B694240F3F3ACB11B62D4C4A>
USERENV(278.bf4) 16:01:18:541 IProfileSecurityCallBack: client authenticated.
USERENV(278.bf4) 16:01:18:541 LoadUserProfileI: RPC end point IProfileDialog_BE024DD9B694240F3F3ACB11B62D4C4A
USERENV(278.bf4) 16:01:18:541 In LoadUserProfileP
USERENV(278.bf4) 16:01:18:541 LoadUserProfile: Running as client, sid = S-1-5-18

The delay is between lines 3 and 4..

Has anyone seen this before ...

Cheers

John
0
Comment
Question by:jmergulhao
10 Comments
 
LVL 31

Expert Comment

by:Cláudio Rodrigues
ID: 20379877
Well couple questions:
1. Does it happen to all users?
2. Does it happen when connecting to any of the servers?
3. What is the size of such roaming profile?
4. Hopefully the roaming profile is not on a DFS share...

Claudio Rodrigues

Microsoft MVP
Windows Server - Terminal Services
0
 

Author Comment

by:jmergulhao
ID: 20383351
answers:

1. Yes to all users.
2. All servers
3. Using local profiles not roaming
4. I do have some roaming profiles on DFS but not on Citrix.. Whats the issue with DFS and roaming profiles on citrix..

thx for the quick response..

Cheers

John
0
 

Author Comment

by:jmergulhao
ID: 20399174
anybody have any ideas on this issue..?
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 

Expert Comment

by:stefglas
ID: 20446414
John,

I'm experiencing the same issue with Citrix Access Essentials 2, using the classic Citrix destop (not published apps) and am seeing the same delay in the USERENV log. Basically it hangs at "checking credentials" for about 15 - 20 secs and the continues logging in. This is the same for RDP and ICA, as well as "normal" users and the administrator. I have spent a couple of hours searching - but without any luck. If you have any further progress I am keen to know more details - will post if/as soon as I have more. (1 yes all users, 2 only the Citrix server, 3 and 4 local profiles only).

Cheers,

Mark
0
 

Author Comment

by:jmergulhao
ID: 20447176
stefglas:

Ive managed to isolate the delay to incorrect home drive path settings in the users AD properties for  the Terminal Services profile tab.. When the user launched the app citrix hung on trying to connect to incorrect folder settings and permissions in the Terminal Service profile settings.  Once i correct the entries for all users delay went away and normal logon delay occured..

This is probably not your problem but worth a AD profile settings review..

Hope that helps..
John
0
 

Expert Comment

by:stefglas
ID: 20453334
John,

We are using local profiles on the Citrix machine - so my guess is that you are correct and this is another issue. However, thanks for the fast response. Will let you know when I find something.

Mark
0
 

Author Comment

by:jmergulhao
ID: 20458805
Are you using Group policy loopback processing mode on you citrix servers.


0
 

Expert Comment

by:mvandenberg
ID: 20463460
John,

yes thats correct - I'm using loopback processing. Any specific thoughts on that?

Mark
0
 

Expert Comment

by:pjhubbard
ID: 20637924
jmergulhao,

We too are having the same issue.  What would loopback processing have to do with it?

Thank,

Phil
0
 

Accepted Solution

by:
jmergulhao earned 0 total points
ID: 20638562
Sorry for the delay, ive been away..

Phil,

Originally i wasnt sure if Mark had loopback processing turned on..

Ive also seen problems with slow logon when mapping drives using DFS ..

Cheers

John
0

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Citrix policies are the most efficient method to configure and tune XenDesktop environments, allowing organizations to control connection, security and bandwidth settings based on various combinations of users, devices or connection types.  Citrix …
In this article, I will show you HOW TO: Create your first Windows Virtual Machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, the Windows OS we will install is Windows Server 2016.
Teach the user how to edit .vmx files to add advanced configuration options Open vSphere Web Client: Edit Settings for a VM: Choose VM Options -> Advanced: Add Configuration Parameters:
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question