Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2079
  • Last Modified:

Delay in Citrix Logon

Im currently running win2k3 sp2 with Citrix 4.5.  Recently users started to get delays in launching published applications from any of the farm servers..  Ive verified AD and DNS.

Below is a Userv login Debug capture:

USERENV(1724.1728) 16:00:47:977 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(1724.1728) 16:00:47:977 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(1724.1728) 16:00:47:993 LibMain: Process Name:  \??\C:\WINDOWS\system32\winlogon.exe
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(1724.1728) 16:01:18:510 =========================================================
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: Entering, hToken = <0x420>, lpProfileInfo = 0x6e5d8
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: lpProfileInfo->lpUserName = <jmerg>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: NULL central profile path
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\CAN-TOR-DC2\netlogon\Default User>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: NULL server name
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: no thread token found, impersonating self.
USERENV(1724.1728) 16:01:18:526 GetInterface: Returning rpc binding handle
USERENV(278.294) 16:01:18:526 IProfileSecurityCallBack: client authenticated.
USERENV(278.294) 16:01:18:526 DropClientContext: Got client token 000009FC, sid = S-1-5-18
USERENV(278.294) 16:01:18:526 MIDL_user_allocate enter
USERENV(278.294) 16:01:18:526 DropClientContext: load profile object successfully made
USERENV(278.294) 16:01:18:526 DropClientContext: Returning 0
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(1724.1728) 16:01:18:526 CProfileDialog::Initialize : Cookie generated <7F1858A17424B4F1D8292A98EC32E1DD>
USERENV(1724.1728) 16:01:18:541 CProfileDialog::Initialize : Endpoint generated <IProfileDialog_BE024DD9B694240F3F3ACB11B62D4C4A>
USERENV(278.bf4) 16:01:18:541 IProfileSecurityCallBack: client authenticated.
USERENV(278.bf4) 16:01:18:541 LoadUserProfileI: RPC end point IProfileDialog_BE024DD9B694240F3F3ACB11B62D4C4A
USERENV(278.bf4) 16:01:18:541 In LoadUserProfileP
USERENV(278.bf4) 16:01:18:541 LoadUserProfile: Running as client, sid = S-1-5-18

The delay is between lines 3 and 4..

Has anyone seen this before ...

Cheers

John
0
jmergulhao
Asked:
jmergulhao
1 Solution
 
Cláudio RodriguesFounder and CEOCommented:
Well couple questions:
1. Does it happen to all users?
2. Does it happen when connecting to any of the servers?
3. What is the size of such roaming profile?
4. Hopefully the roaming profile is not on a DFS share...

Claudio Rodrigues

Microsoft MVP
Windows Server - Terminal Services
0
 
jmergulhaoAuthor Commented:
answers:

1. Yes to all users.
2. All servers
3. Using local profiles not roaming
4. I do have some roaming profiles on DFS but not on Citrix.. Whats the issue with DFS and roaming profiles on citrix..

thx for the quick response..

Cheers

John
0
 
jmergulhaoAuthor Commented:
anybody have any ideas on this issue..?
0
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

 
stefglasCommented:
John,

I'm experiencing the same issue with Citrix Access Essentials 2, using the classic Citrix destop (not published apps) and am seeing the same delay in the USERENV log. Basically it hangs at "checking credentials" for about 15 - 20 secs and the continues logging in. This is the same for RDP and ICA, as well as "normal" users and the administrator. I have spent a couple of hours searching - but without any luck. If you have any further progress I am keen to know more details - will post if/as soon as I have more. (1 yes all users, 2 only the Citrix server, 3 and 4 local profiles only).

Cheers,

Mark
0
 
jmergulhaoAuthor Commented:
stefglas:

Ive managed to isolate the delay to incorrect home drive path settings in the users AD properties for  the Terminal Services profile tab.. When the user launched the app citrix hung on trying to connect to incorrect folder settings and permissions in the Terminal Service profile settings.  Once i correct the entries for all users delay went away and normal logon delay occured..

This is probably not your problem but worth a AD profile settings review..

Hope that helps..
John
0
 
stefglasCommented:
John,

We are using local profiles on the Citrix machine - so my guess is that you are correct and this is another issue. However, thanks for the fast response. Will let you know when I find something.

Mark
0
 
jmergulhaoAuthor Commented:
Are you using Group policy loopback processing mode on you citrix servers.


0
 
mvandenbergCommented:
John,

yes thats correct - I'm using loopback processing. Any specific thoughts on that?

Mark
0
 
pjhubbardCommented:
jmergulhao,

We too are having the same issue.  What would loopback processing have to do with it?

Thank,

Phil
0
 
jmergulhaoAuthor Commented:
Sorry for the delay, ive been away..

Phil,

Originally i wasnt sure if Mark had loopback processing turned on..

Ive also seen problems with slow logon when mapping drives using DFS ..

Cheers

John
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now