Delay in Citrix Logon
Im currently running win2k3 sp2 with Citrix 4.5. Recently users started to get delays in launching published applications from any of the farm servers.. Ive verified AD and DNS.
Below is a Userv login Debug capture:
USERENV(1724.1728) 16:00:47:977 InitializePolicyProcessing
USERENV(1724.1728) 16:00:47:977 InitializePolicyProcessing
USERENV(1724.1728) 16:00:47:993 LibMain: Process Name: \??\C:\WINDOWS\system32\wi
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(1724.1728) 16:01:18:510 ==========================
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: Entering, hToken = <0x420>, lpProfileInfo = 0x6e5d8
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: lpProfileInfo->lpUserName = <jmerg>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: NULL central profile path
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: lpProfileInfo->lpDefaultPa
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: NULL server name
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: no thread token found, impersonating self.
USERENV(1724.1728) 16:01:18:526 GetInterface: Returning rpc binding handle
USERENV(278.294) 16:01:18:526 IProfileSecurityCallBack: client authenticated.
USERENV(278.294) 16:01:18:526 DropClientContext: Got client token 000009FC, sid = S-1-5-18
USERENV(278.294) 16:01:18:526 MIDL_user_allocate enter
USERENV(278.294) 16:01:18:526 DropClientContext: load profile object successfully made
USERENV(278.294) 16:01:18:526 DropClientContext: Returning 0
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(1724.1728) 16:01:18:526 CProfileDialog::Initialize
USERENV(1724.1728) 16:01:18:541 CProfileDialog::Initialize
USERENV(278.bf4) 16:01:18:541 IProfileSecurityCallBack: client authenticated.
USERENV(278.bf4) 16:01:18:541 LoadUserProfileI: RPC end point IProfileDialog_BE024DD9B69
USERENV(278.bf4) 16:01:18:541 In LoadUserProfileP
USERENV(278.bf4) 16:01:18:541 LoadUserProfile: Running as client, sid = S-1-5-18
The delay is between lines 3 and 4..
Has anyone seen this before ...
Cheers
John
Below is a Userv login Debug capture:
USERENV(1724.1728) 16:00:47:977 InitializePolicyProcessing
USERENV(1724.1728) 16:00:47:977 InitializePolicyProcessing
USERENV(1724.1728) 16:00:47:993 LibMain: Process Name: \??\C:\WINDOWS\system32\wi
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(1724.1728) 16:01:18:510 ==========================
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: Entering, hToken = <0x420>, lpProfileInfo = 0x6e5d8
USERENV(1724.1728) 16:01:18:510 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: lpProfileInfo->lpUserName = <jmerg>
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: NULL central profile path
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: lpProfileInfo->lpDefaultPa
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: NULL server name
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: no thread token found, impersonating self.
USERENV(1724.1728) 16:01:18:526 GetInterface: Returning rpc binding handle
USERENV(278.294) 16:01:18:526 IProfileSecurityCallBack: client authenticated.
USERENV(278.294) 16:01:18:526 DropClientContext: Got client token 000009FC, sid = S-1-5-18
USERENV(278.294) 16:01:18:526 MIDL_user_allocate enter
USERENV(278.294) 16:01:18:526 DropClientContext: load profile object successfully made
USERENV(278.294) 16:01:18:526 DropClientContext: Returning 0
USERENV(1724.1728) 16:01:18:526 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(1724.1728) 16:01:18:526 CProfileDialog::Initialize
USERENV(1724.1728) 16:01:18:541 CProfileDialog::Initialize
USERENV(278.bf4) 16:01:18:541 IProfileSecurityCallBack: client authenticated.
USERENV(278.bf4) 16:01:18:541 LoadUserProfileI: RPC end point IProfileDialog_BE024DD9B69
USERENV(278.bf4) 16:01:18:541 In LoadUserProfileP
USERENV(278.bf4) 16:01:18:541 LoadUserProfile: Running as client, sid = S-1-5-18
The delay is between lines 3 and 4..
Has anyone seen this before ...
Cheers
John
ASKER
answers:
1. Yes to all users.
2. All servers
3. Using local profiles not roaming
4. I do have some roaming profiles on DFS but not on Citrix.. Whats the issue with DFS and roaming profiles on citrix..
thx for the quick response..
Cheers
John
1. Yes to all users.
2. All servers
3. Using local profiles not roaming
4. I do have some roaming profiles on DFS but not on Citrix.. Whats the issue with DFS and roaming profiles on citrix..
thx for the quick response..
Cheers
John
ASKER
anybody have any ideas on this issue..?
John,
I'm experiencing the same issue with Citrix Access Essentials 2, using the classic Citrix destop (not published apps) and am seeing the same delay in the USERENV log. Basically it hangs at "checking credentials" for about 15 - 20 secs and the continues logging in. This is the same for RDP and ICA, as well as "normal" users and the administrator. I have spent a couple of hours searching - but without any luck. If you have any further progress I am keen to know more details - will post if/as soon as I have more. (1 yes all users, 2 only the Citrix server, 3 and 4 local profiles only).
Cheers,
Mark
I'm experiencing the same issue with Citrix Access Essentials 2, using the classic Citrix destop (not published apps) and am seeing the same delay in the USERENV log. Basically it hangs at "checking credentials" for about 15 - 20 secs and the continues logging in. This is the same for RDP and ICA, as well as "normal" users and the administrator. I have spent a couple of hours searching - but without any luck. If you have any further progress I am keen to know more details - will post if/as soon as I have more. (1 yes all users, 2 only the Citrix server, 3 and 4 local profiles only).
Cheers,
Mark
ASKER
stefglas:
Ive managed to isolate the delay to incorrect home drive path settings in the users AD properties for the Terminal Services profile tab.. When the user launched the app citrix hung on trying to connect to incorrect folder settings and permissions in the Terminal Service profile settings. Once i correct the entries for all users delay went away and normal logon delay occured..
This is probably not your problem but worth a AD profile settings review..
Hope that helps..
John
Ive managed to isolate the delay to incorrect home drive path settings in the users AD properties for the Terminal Services profile tab.. When the user launched the app citrix hung on trying to connect to incorrect folder settings and permissions in the Terminal Service profile settings. Once i correct the entries for all users delay went away and normal logon delay occured..
This is probably not your problem but worth a AD profile settings review..
Hope that helps..
John
John,
We are using local profiles on the Citrix machine - so my guess is that you are correct and this is another issue. However, thanks for the fast response. Will let you know when I find something.
Mark
We are using local profiles on the Citrix machine - so my guess is that you are correct and this is another issue. However, thanks for the fast response. Will let you know when I find something.
Mark
ASKER
Are you using Group policy loopback processing mode on you citrix servers.
John,
yes thats correct - I'm using loopback processing. Any specific thoughts on that?
Mark
yes thats correct - I'm using loopback processing. Any specific thoughts on that?
Mark
jmergulhao,
We too are having the same issue. What would loopback processing have to do with it?
Thank,
Phil
We too are having the same issue. What would loopback processing have to do with it?
Thank,
Phil
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
1. Does it happen to all users?
2. Does it happen when connecting to any of the servers?
3. What is the size of such roaming profile?
4. Hopefully the roaming profile is not on a DFS share...
Claudio Rodrigues
Microsoft MVP
Windows Server - Terminal Services