2008r2 server v.slow to log into windows 2003 domain r1

aslsupport
aslsupport used Ask the Experts™
on
I have just installed 5 clean 2008r2 servers into a windows 2003 r1 domain.

Servers are fully patched and event logs are good however when logging via RDP it takes a minute or two to login.

DNS is all correct.

if i log into the servers locall via RDP it is rapid.

the only warning in the event log is

event id 6006

The winlogon notification subscriber <GPClient> took 78 second(s) to handle the notification event (Logon).

I have disabled printers coming through. It is nothing to do with printers.

my guess is some kind of compatability with group policy.

Look forward to your assistance.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2012

Commented:
Points to a GPO issue

Disable any secondary network cards you should only have one enabled

Could be a GPO conflict. Let's try this put one of the servers in it's own OU create a test user put this user in the same OU. Disable all GPOs to this OU. Try to logon.
i have heard about the problem having to do with mapped network drives, do you have any mapped networked drives?

Author

Commented:
Thanks for help however

NICs are fine.

server already in computers OU and user is administrator in users OU.

no mapped drives.... not even a home drive.
Top Expert 2012

Commented:
That is what I saying segregate one server and one user in it's own OU for testing to see if problem still exist after disabling ALL GPOS

Author

Commented:
ok

new ou created and blocked inheritance

dropped server object (rebooted server) and user into that OU and it still runs slow.
Top Expert 2012

Commented:
Now you have the server and user in the same OU with all of the GPOs blocked, right?

Run gpresult lets see if any local policy is causing the problem. Post results

Author

Commented:
Hi

Pls see below

default domain policy is still being applied.


Microsoft (R) Windows (R) Operating System Group Policy Result tool v2
Copyright (C) Microsoft Corp. 1981-2001

Created On 08/08/2011 at 14:42:13


RSOP data for RICHCORPSERV\administrator on SVR06 : Logging Mode
-----------------------------------------------------------------

OS Configuration:            Member Server
OS Version:                  6.1.7601
Site Name:                   Default-First-Site-Name
Roaming Profile:             N/A
Local Profile:               C:\Users\administrator.RICHCORPSERV
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=SVR06,OU=2008,DC=richcorpserv,DC=com
    Last time Group Policy was applied: 08/08/2011 at 14:37:23
    Group Policy was applied from:      richsvr.richcorpserv.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        RICHCORPSERV
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        N/A

    The following GPOs were not applied because they were filtered out
    ------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups
    -------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        This Organization
        SVR06$
        Domain Computers
        System Mandatory Level


USER SETTINGS
--------------
    CN=Administrator,CN=Users,DC=richcorpserv,DC=com
    Last time Group Policy was applied: 08/08/2011 at 14:39:54
    Group Policy was applied from:      richsvr.richcorpserv.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        RICHCORPSERV
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        Outlook gpo
        Disable Auto Archive

    The following GPOs were not applied because they were filtered out
    ------------------------------------------------------------------
        Small Business Server Remote Assistance Policy
            Filtering:  Disabled (GPO)

        Small Business Server Lockout Policy
            Filtering:  Disabled (GPO)

        Small Business Server Client Computer
            Filtering:  Disabled (GPO)

        Local Group Policy
            Filtering:  Not Applied (Empty)

        Turn Off File Sync
            Filtering:  Not Applied (Empty)

        Small Business Server Internet Connection Firewall
            Filtering:  Disabled (GPO)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Admins
        Everyone
        BUILTIN\Administrators
        BUILTIN\Users
        REMOTE INTERACTIVE LOGON
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Group Policy Creator Owners
        Double-Take Admin
        Exchange Domain Servers
        Double-Take Monitors
        Exchange Mailbox Access
        Double-Take Recall
        Domain Users
        WebMarshal - Standard Users
        Web users
        Schema Admins
        SBS Report Users
        Enterprise Admins
        SBS Mobile Users
        SophosAdministrator
        Exchange Enterprise Servers
        Offer Remote Assistance Helpers
        High Mandatory Level

C:\Users\administrator.RICHCORPSERV>
Top Expert 2012

Commented:
Are you sure you went to OU and block GPO inheritance?

Author

Commented:
positive.

nothing shows up in teh group policy inheriatence box and i have a blue exlamation mark on the OU in question.
Top Expert 2012

Commented:
Well should be blocking all GPOs but it is not.

Something within the GPO is causing the slowness.

Author

Commented:
sorry i was running gpresult as administrator and not as the user I had dropped into the OU

here is the results run as the user inside the blocked gpo OU. as expected no gpo's being applied yet still running slow

C:\Users\pierre>gpresult /r

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 08/08/2011 at 15:11:01


RSOP data for RICHCORPSERV\pierre on SVR06 : Logging Mode
----------------------------------------------------------

OS Configuration:            Member Server
OS Version:                  6.1.7601
Site Name:                   N/A
Roaming Profile:             N/A
Local Profile:               C:\Users\pierre
Connected over a slow link?: No


USER SETTINGS
--------------
    CN=Pierre Jehan,OU=2008,DC=richcorpserv,DC=com
    Last time Group Policy was applied: 08/08/2011 at 15:09:14
    Group Policy was applied from:      richsvr.richcorpserv.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        RICHCORPSERV
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        N/A

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        Remote Desktop Users
        BUILTIN\Users
        REMOTE INTERACTIVE LOGON
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Medium Mandatory Level

C:\Users\pierre>



Top Expert 2012

Commented:
Good. So, where is it slow now? Logging? Where during login? Just through RDP, right?

Post ipconfig /all for me.

Make sure you have most updated network drivers installed

Remove any AV installed

Check this out this helped with an issue just like yours looked like GPO issue but wasn't

http://cmorse.org/blog/archives/111

Author

Commented:
hi

its slow through the whole login process. approx 30 seconds on welcome screen and up to a minute applying user settings.

there is no AV on there. it is running on a citrix xenserver and all the drivers are up to date

Ethernet adapter Local Area Connection 2:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Citrix PV Ethernet Adapter
   Physical Address. . . . . . . . . : A2-75-22-48-B2-C3
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.180.16(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.180.254
   DNS Servers . . . . . . . . . . . : 192.168.180.1
   NetBIOS over Tcpip. . . . . . . . : Disabled

Author

Commented:
Further find.

when copying a file from DC to xp or 2003 I find it is quick and as expected results.

however when copying file from 2003 DC to new 2008r2 box it is serioulsy slow.

if i copy from xp or 2003 to the new 2008r2 boxes again the results are quick and as exptected.

Top Expert 2012

Commented:
SO, copying to the 2003 server from 2008 server is slow?

Author

Commented:
either way to or from the 2003 DC.

but from a 2003 or xp client it is fine.
Top Expert 2012

Commented:
It was to do with the NIC settings on the SBS server.

disbaletask offload etc etc etc.

http://support.microsoft.com/kb/948496

Author

Commented:
Finally found this

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial