Network Slows Down at almost the same time each day

Every day at approximately 4PM several XP computers slow down to the point that applications hang.  If the user restarts their computer then everything returns to normal.

There are no errors logged by the 2003 server.

The computers log events 1053, 1054 Userenv, and event ID 15 Autoenrollment.  The users complain that it takes a while to log in, but once logged in the system works fine until 4PM.  

All of the computers are Windows XP Pro.
captblackeagleAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

and235100Commented:
Do you have any scheduled A/V or anti-malware scans that operate at this time?
0
and235100Commented:
Might be of some use:

http://www.eventid.net/display.asp?eventid=1053&eventno=1584&source=Userenv&phase=1
http://www.eventid.net/display.asp?eventid=1054&eventno=1393&source=Userenv&phase=1
http://www.eventid.net/display.asp?eventid=15&eventno=1397&source=AutoEnrollment&phase=1

I would advise as a quick potential fix - swap out the network card - then, remove and re-join a computer from/to the domain - and see if the issue is resolved.


0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
briancassinCommented:
Could you please post the exact error messages from those event logs.

You probably have something kicking off at that time such as said before an AV scan or anti malware it could really be any utility program, including backup systems like backup exec or other client server utilities.

Do you have anything in scheduled tasks on that workstation ?

Are you using any sort of patch management, disk management or other utility software ?


If you suspect something network related you may want to run a network protocol analyzer such as http://www.wireshark.org 

0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

SequimPCCommented:
Check if you have shadow copy enabled or "Collect Server Performance Data.job"

that can do it.
0
captblackeagleAuthor Commented:
I have checked all scheduled tasks both on the server and the client machines.  No go.  I have also checked and found that the dns entries for the clients were pointing to the gateway and not the dns server.  Will speak with the client today to see if this has fixed the issue.
0
captblackeagleAuthor Commented:
Ok...issue is now this.   I changed the DNS to point to the dns server. I turned autoenrollment off.

The user now logs in quickly, and there are no more network slowdowns on that machine.  However, now the user has limited rights.  That is their Start Menu does not allow them to do anything other than look at My Computer.  

They have no access to ctrl-alt-delete, Control Panel...nothing.  They are listed as an administrator on the machine.  

I will assume this is a rights issue with the users profile.
0
briancassinCommented:
Yes but to be sure you could create a new user profile. That may also be a corrupted local profile on that computer.  Check to see if one got stuck on the machine if so delete it
0
SysExpertCommented:
COrrect. Either a GPO, local policy, or corrupted user profile locally.


Create a new user profile/ login and see if that works OK.


I hope this helps !

0
captblackeagleAuthor Commented:
This did indeed fix the problem.  The new problem is one that deserves its own post.  Thanks for the information
0
and235100Commented:
Thank you.
0
briancassinCommented:
So what fixed the problem ?
0
captblackeagleAuthor Commented:
I t was actually just the dns for the workstations.

I originally was hired to move the computers to the domain.  Based on the way we set up our contracts and after consulting with the owner they thought they could work out any other issues that may take place.

The dns they provided me looked legit...192.168.50.3.  However, the dns is controlled by another server 192.168.50.238.  when I changed where the dns connected they fully joined the AD and the domain.  Sadly this created an issue of GPO which still needs to be sorted out...

I had actually looked at the Event IDs that and235100 had mentioned...but since the assumption was that 192.168.50.3 was the dns server I doubted it.  After finding that the actual dns server was something else this fixed the issue.  

I wont be able to do much till the Group Policies are straightened out.
0
briancassinCommented:
that would do it
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.