• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4575
  • Last Modified:

Very Slow Logon after SBS 2011 migration (from SBS2003)

After migration from SBS 2003 to SBS2011, all workstations take forever to boot and get to the login screen.

From Userenv.log:
USERENV(15c4.15c8) 17:14:57:269 LibMain: Process Name:  \\?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
USERENV(300.540) 17:15:18:418 ImpersonateUser: Failed to impersonate user with 5.
USERENV(300.540) 17:15:18:418 GetUserNameAndDomain Failed to impersonate user
USERENV(300.540) 17:15:18:418 ImpersonateUser: Failed to impersonate user with 5.
...
The above "waists about 5 minutes...
I followed many troubleshooting "hints" but I could not figure it out yet...

Not sure if related: I have some IIS issues (Companyweb: service unavailable/error 503)...

Also, I cannot remote to workstations (but Server remoting is ok...)  I have a feeling that this could be a GPO / certificate problem?
Any help will be appreciated :)

   
0
Constantine_G
Asked:
Constantine_G
1 Solution
 
CNS_SupportCommented:
Couple of things to try.
Disconnect the network cable and start the computer.
You could also try removing computer from the domain and then rejoining the domain.
If you have trouble finding the server, be sure to use the FQDN (fully qualified domain name)
ie not domain = domain  it should be domain = domain.local or whatever you are using for your domain.
0
 
Constantine_GAuthor Commented:
I removed / rejoined but still bad.  Maybe I saved a couple of minutes...  
I still see these errors in the userenv.log:

USERENV(40c.410) 10:00:14:937 GetUserDNSDomainName:  Domain name is NT Authority.  No DNS domain name available.
USERENV(740.220) 10:00:14:953 GetProfileType:  Profile already loaded.
USERENV(740.220) 10:00:14:953 GetProfileType: ProfileFlags is 0
USERENV(740.220) 10:00:14:953 ImpersonateUser: Failed to impersonate user with 5.
USERENV(740.220) 10:00:14:953 GetUserNameAndDomain Failed to impersonate user
USERENV(740.220) 10:00:14:968 GetUserDNSDomainName:  Domain name is NT Authority.  No DNS domain name available.
...
USERENV(b3c.298) 10:04:37:350 GetUserDNSDomainName: Failed to impersonate user
USERENV(134c.1350) 10:04:38:131 LibMain: Process Name:  C:\WINDOWS\system32\wbem\unsecapp.exe
USERENV(1368.136c) 10:04:38:209 LibMain: Process Name:  C:\WINDOWS\system32\wbem\wmiprvse.exe
USERENV(ea8.f08) 10:04:49:627 LibMain: Process Name:  C:\Program Files\Windows Home Server\WHSTrayApp.exe
USERENV(b3c.298) 10:05:37:733 ImpersonateUser: Failed to impersonate user with 5.
USERENV(b3c.298) 10:05:37:733 GetUserNameAndDomain Failed to impersonate user
USERENV(b3c.298) 10:05:37:749 ImpersonateUser: Failed to impersonate user with 5.
USERENV(b3c.298) 10:05:37:749 GetUserDNSDomainName: Failed to impersonate user
USERENV(b3c.298) 10:05:37:749 ImpersonateUser: Failed to impersonate user with 5.
...
0
 
Constantine_GAuthor Commented:
Am I the only one with this problem?  (I am sure not...)  Any clues?

Thanks
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
Constantine_GAuthor Commented:
Looking at the logs again:  This is a laptop that at work connects to the new server (SBS2011) and at home it connects to a home server.  Could this be a conflict? (But it used to be ok with the old SBS2003 Server at work...).
 
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
I've requested that this question be deleted for the following reason:

This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
 
Constantine_GAuthor Commented:
•      I disabled Windows SBS CSE Policy (not CES as mentioned above), I set the maximum time for Group Policy scripts to "not configured", I forced an update of the policy, rebooted the workstation and:
Workstation started /I saw the login screen in less than 30 seconds!!!!!!!!!!!!!
I really suspected that there is a "trust issue" running the scripts on the workstations OR there is a setting altered on the workstations that donot allow vbs scripts at all!
Using notepad I created a test.vbs file on the desktop. Right click, check "Open with": check what options are selected. Microsoft® Windows Based Script Hostshould be Bold (selected) as the program we need to run the vb scripts.
In my case it was not: I looked around and I saw a similar posting. What settings were "altered or damaged" in the registry and vb scripts could not run? I found theWin XP registry settings from http://www.dougknox.com/xp/fileassoc/xp_vbs_file_association.zip (WARNING: NOTsure if these apply to other OS's)
1) on the workstation: Merged the above settings to the registry,
2) On the SBS server: Restored the default GPO to run the vbscripts on the SBS clients
3) on the workstation, a cmd window I forced (c:\gpupdate /force)
4) on the workstation, I verified that the .vbs files run with Microsoft® Windows Based Script Host(Right click a "test.vbs" file (could be an empty file) > open with> choose program> Under "other programs" is "Microsoft ® Windows Based Script Host" listed?
Choose it> checkmark "always use this program to open this type of file"> then hit OK)
Restarted the workstation. It connected to the network, run the scripts and I got login screen in45 seconds!
PS: Someone told me that in some workstations they had installed System Mechanic (IOLO). I looked around and I found out that this software disables the ability to run vb scripts as this could be a "security threat" to the system... This statement is true but it caused me a lot of headackes... The computers are made to run programs! What good are they if they cannot run programs??? You just need to be carefull to run programs that are trusted... ;)
THANKS EVERYONE FOR THE HELP!!!!!!!!!!!!!!!!!!!
________________________________________
Constantine
0
 
Constantine_GAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for Constantine_G's comment http:/Q_26941759.html#37003811

for the following reason:

This worked...  It might help others with same problems.
0
 
Constantine_GAuthor Commented:
This worked...  It might help others with same problems
0
 
PAQ_ManCommented:
Restarting the process on behalf of the author.
0
 
Constantine_GAuthor Commented:
PAQ_Man
Sorry but I do not really understand how this works...  I figured that if you close it then no-one can see the answer?  
My intend was to provide the solution so other people can see it...
Thanks
CG
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now