quadrumane
asked on
Outlook 2007 or 2010 takes long during login on Exchange 2010
Outlook 2007 or 2010 takes long during login on Exchange 2010 (Outlook Anywhere). We've been testing from different locations but it's always slow. Once logged on it's fast. If someone has an idea please feel free to share it
Thank you
Thank you
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
It happens to all users from any remote site (not in local or from OWA) The mailboxes are limited to 3GB but most users have smaller mailboxes (300MB) No archive.
I've been trying all suggested steps at the PAQ, including disabling kernel auth. But users were no longer able to connect from Outlook so I put it back to true (value) Autodiscover stopped, I restarded it and now it's working again. It seems to take a little less time but I now get this repeated event:
Process Microsoft.Exchange.RpcClie
DEL:ee6afc96-44c3-4f73-983
{edited by MEE}
I've been trying all suggested steps at the PAQ, including disabling kernel auth. But users were no longer able to connect from Outlook so I put it back to true (value) Autodiscover stopped, I restarded it and now it's working again. It seems to take a little less time but I now get this repeated event:
Process Microsoft.Exchange.RpcClie
DEL:ee6afc96-44c3-4f73-983
{edited by MEE}
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
(note: is it possible to remove a text from what I just posted, I was not suppose to include the client domain name)
Yes, we were running Exchange 2007. A Mailbox server has been lost after a SAN crashed (yes it can happens) we decided to get the database back on Exchange 2010 (we used PST files to get the latest updated emails for several users and LucID Digiscope to recover the remaining mailboxes from a backup)
We have no problem with the new mailbox server Exchange 2010. Why Exchange 2010 ? We had to act fast add we had HA in mind (DAG will be added soon) We could have a debate on whether we should have upgraded or not. But it's done now.
Another Exchange 2010 server has been deployed with HUB and CAS roles. Exchange 2007 HUB-CAS server has been uninstalled.
The old mailbox server reference, no longer available of course, has been deleted with ADSIEDIT. I followed the instructions to the letter to delete the reference.
About 100 users are connected to the server. We had no trouble at all with Exchange 2007.
I don't know about recycling exchange services.
We don't need the public folders but if it can help I could add new public folder. But first I have to remove the old reference.
Yes, we were running Exchange 2007. A Mailbox server has been lost after a SAN crashed (yes it can happens) we decided to get the database back on Exchange 2010 (we used PST files to get the latest updated emails for several users and LucID Digiscope to recover the remaining mailboxes from a backup)
We have no problem with the new mailbox server Exchange 2010. Why Exchange 2010 ? We had to act fast add we had HA in mind (DAG will be added soon) We could have a debate on whether we should have upgraded or not. But it's done now.
Another Exchange 2010 server has been deployed with HUB and CAS roles. Exchange 2007 HUB-CAS server has been uninstalled.
The old mailbox server reference, no longer available of course, has been deleted with ADSIEDIT. I followed the instructions to the letter to delete the reference.
About 100 users are connected to the server. We had no trouble at all with Exchange 2007.
I don't know about recycling exchange services.
We don't need the public folders but if it can help I could add new public folder. But first I have to remove the old reference.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Correct we have one mailbox and one HUB-CAS
1 - The HUB-CAS is not reporting any further errors.
2 - The Mailbox is nor reporting any error
3 - No I don't use the old profiles. All all profiles have been deleted. New profiles have been created.
4 - We mostly used PST files to import data into the new Exchange mailbox
5 - We disabled all the mailboxes (the old server was no longer available) Then all mailboxes have been created.
6 - The servers have been rebooted several times (so all services recycled)
7 - What log files are you referring at ?
8 - It's not faster with new mailboxes
9 - it' faster in local
But on both DCs I've got this event:
The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.
1 - The HUB-CAS is not reporting any further errors.
2 - The Mailbox is nor reporting any error
3 - No I don't use the old profiles. All all profiles have been deleted. New profiles have been created.
4 - We mostly used PST files to import data into the new Exchange mailbox
5 - We disabled all the mailboxes (the old server was no longer available) Then all mailboxes have been created.
6 - The servers have been rebooted several times (so all services recycled)
7 - What log files are you referring at ?
8 - It's not faster with new mailboxes
9 - it' faster in local
But on both DCs I've got this event:
The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.
ASKER
About the KDC event, one of the DC (new) was not set to Eastern time. It has been fixed.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yes Outlook is a bit slower when running rpc over http. But we have several other Exchange servers (different networks) and it's never that slow.
All outlook 2007 and 2010 clients are already encrypted. I guess on Exchange 2010 encryption is enabled by default.
Antispam was not enabled. I've seen a lot a retrying send in the queue (spam) Recipient filtering is now enabled. I don't see any option to keep bounced emails (spam) from being sent out. We've been backscattered.
Thanks again
All outlook 2007 and 2010 clients are already encrypted. I guess on Exchange 2010 encryption is enabled by default.
Antispam was not enabled. I've seen a lot a retrying send in the queue (spam) Recipient filtering is now enabled. I don't see any option to keep bounced emails (spam) from being sent out. We've been backscattered.
Thanks again
You said you only have only ONE mailbox server and ONE HUB/CAS ... now suddenly you have other exchange servers ????
In order to figure this out I need to know this kind of things...
Where is your CAS located ? On the same subnet where you have the problem or other subnet ?
Fast link / slow link ? ... if the setup is more complex please let me know.
About the errors tried to look on one of the client computers in the event log ?
If you CTRL+Right Click / Left Click the small outlook icon docked on your right side of the taskbar you can choose to see Connection Status ... any errors there ?
In order to figure this out I need to know this kind of things...
Where is your CAS located ? On the same subnet where you have the problem or other subnet ?
Fast link / slow link ? ... if the setup is more complex please let me know.
About the errors tried to look on one of the client computers in the event log ?
If you CTRL+Right Click / Left Click the small outlook icon docked on your right side of the taskbar you can choose to see Connection Status ... any errors there ?
ASKER
No I mean we'e running others servers for other clients. Each client is at a different location.
ASKER
The HUB-CAS and mailbox are on the same subnet (LAN)
- The internet is 20Mbits fiber.
- 2 firewalls Sonicwall NSA-3500 in HA to protect the network.
- Vmware (ESX 4)
- SAN is a MD3000i.
- Each Exchange server runs on 2 vCPU with 8GB RAM.
The setup is quite basic.
Not a single error in the event viewer on the client computers. No errors reported on Outlook.
Time to connect is about 2 minutes.
I have to add another HUB-CAS (NLB) I'll see if it speeds up RPC over HTTP
- The internet is 20Mbits fiber.
- 2 firewalls Sonicwall NSA-3500 in HA to protect the network.
- Vmware (ESX 4)
- SAN is a MD3000i.
- Each Exchange server runs on 2 vCPU with 8GB RAM.
The setup is quite basic.
Not a single error in the event viewer on the client computers. No errors reported on Outlook.
Time to connect is about 2 minutes.
I have to add another HUB-CAS (NLB) I'll see if it speeds up RPC over HTTP
Don't need to add one more and I won't recommend using the NLB feature if you are only using a non mangeable switch as Microsoft NLB could flood your upstream switches , I would go for round robin.
(http://technet.microsoft.com/en-us/library/bb742455.aspx)
Still , taking 2 minutes to connect it's like forever for the users ...
Tried using the Cached mode on the outlook ?
Do you have any DNS issues ? Disabled the RPC over HTTP on fast link and let it enabled only on slow connections ?
Your problem might also be the Autodiscover that does not work properly or not configured properly.
Is windows firewall enabled on clients ? Try disable that if its on and see if its faster.
(http://technet.microsoft.com/en-us/library/bb742455.aspx)
Still , taking 2 minutes to connect it's like forever for the users ...
Tried using the Cached mode on the outlook ?
Do you have any DNS issues ? Disabled the RPC over HTTP on fast link and let it enabled only on slow connections ?
Your problem might also be the Autodiscover that does not work properly or not configured properly.
Is windows firewall enabled on clients ? Try disable that if its on and see if its faster.
ASKER
Snapshots from outlook /rpcdiag
22-08-2010-4-08-12-PM.png
22-08-2010-4-08-12-PM.png
ASKER
Snapshots from outlook /rpcdiag
22-08-2010-4-09-46-PM.png
22-08-2010-4-09-46-PM.png
ASKER
The fist snapshot is taken from a different Exchange system (another network, different AD) where the users are connected in seconds.
The second snapshot is taken from the system we have trouble with.
The second snapshot is taken from the system we have trouble with.
Yes , as you can see , on the first snapshot your users are connecting via the LOCAL area network , while on the second they connect trough HTTPS. (RPC over HTTP) Therefore the delay.
That's why I said DISABLE the RPC over HTTP when connected to local network.
Outlooksettings.jpg
That's why I said DISABLE the RPC over HTTP when connected to local network.
Outlooksettings.jpg
ASKER
Thank I was testing. Almost all users access their Outlook email account remotely. When using OWA it's fast, with Outlook 2007 it takes between 2 to 3 minutes. With Outlook 2010 it takes about 30 seconds.
I just don't understand why it's so long with Outlook 2007 SP2.
Maybe because the public folders have been removed ?
I just don't understand why it's so long with Outlook 2007 SP2.
Maybe because the public folders have been removed ?
Never tested without PF , you can just add a dummy PF database to check.
ASKER
On Outlook 2010 it's fast. But not on Outlook 2007. So ierhaps it's time to upgrade.
and you are running cached mode on both ?
ASKER
yes I do
ASKER
Some of the advices you have posted should have solved this problem.. This is why I will accept some of the solutions you've posted. Thanks
Is this happening on all the clients or only on some ?
How big are the mailboxes ?
How big are the archive files ?
Where are the archive files located ? Tried disconnecting archive files ?
What about if you create a brand new Outlook Profile ?