Avatar of aslsupport
aslsupport
 asked on

2008r2 server v.slow to log into windows 2003 domain r1

I have just installed 5 clean 2008r2 servers into a windows 2003 r1 domain.

Servers are fully patched and event logs are good however when logging via RDP it takes a minute or two to login.

DNS is all correct.

if i log into the servers locall via RDP it is rapid.

the only warning in the event log is

event id 6006

The winlogon notification subscriber <GPClient> took 78 second(s) to handle the notification event (Logon).

I have disabled printers coming through. It is nothing to do with printers.

my guess is some kind of compatability with group policy.

Look forward to your assistance.
Email ClientsWindows Server 2008Windows Server 2003

Avatar of undefined
Last Comment
aslsupport

8/22/2022 - Mon
Darius Ghassem

Points to a GPO issue

Disable any secondary network cards you should only have one enabled

Could be a GPO conflict. Let's try this put one of the servers in it's own OU create a test user put this user in the same OU. Disable all GPOs to this OU. Try to logon.
xmlmagician

i have heard about the problem having to do with mapped network drives, do you have any mapped networked drives?
aslsupport

ASKER
Thanks for help however

NICs are fine.

server already in computers OU and user is administrator in users OU.

no mapped drives.... not even a home drive.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
Darius Ghassem

That is what I saying segregate one server and one user in it's own OU for testing to see if problem still exist after disabling ALL GPOS
aslsupport

ASKER
ok

new ou created and blocked inheritance

dropped server object (rebooted server) and user into that OU and it still runs slow.
Darius Ghassem

Now you have the server and user in the same OU with all of the GPOs blocked, right?

Run gpresult lets see if any local policy is causing the problem. Post results
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
aslsupport

ASKER
Hi

Pls see below

default domain policy is still being applied.


Microsoft (R) Windows (R) Operating System Group Policy Result tool v2
Copyright (C) Microsoft Corp. 1981-2001

Created On 08/08/2011 at 14:42:13


RSOP data for RICHCORPSERV\administrator on SVR06 : Logging Mode
-----------------------------------------------------------------

OS Configuration:            Member Server
OS Version:                  6.1.7601
Site Name:                   Default-First-Site-Name
Roaming Profile:             N/A
Local Profile:               C:\Users\administrator.RICHCORPSERV
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=SVR06,OU=2008,DC=richcorpserv,DC=com
    Last time Group Policy was applied: 08/08/2011 at 14:37:23
    Group Policy was applied from:      richsvr.richcorpserv.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        RICHCORPSERV
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        N/A

    The following GPOs were not applied because they were filtered out
    ------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups
    -------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        This Organization
        SVR06$
        Domain Computers
        System Mandatory Level


USER SETTINGS
--------------
    CN=Administrator,CN=Users,DC=richcorpserv,DC=com
    Last time Group Policy was applied: 08/08/2011 at 14:39:54
    Group Policy was applied from:      richsvr.richcorpserv.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        RICHCORPSERV
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        Outlook gpo
        Disable Auto Archive

    The following GPOs were not applied because they were filtered out
    ------------------------------------------------------------------
        Small Business Server Remote Assistance Policy
            Filtering:  Disabled (GPO)

        Small Business Server Lockout Policy
            Filtering:  Disabled (GPO)

        Small Business Server Client Computer
            Filtering:  Disabled (GPO)

        Local Group Policy
            Filtering:  Not Applied (Empty)

        Turn Off File Sync
            Filtering:  Not Applied (Empty)

        Small Business Server Internet Connection Firewall
            Filtering:  Disabled (GPO)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Admins
        Everyone
        BUILTIN\Administrators
        BUILTIN\Users
        REMOTE INTERACTIVE LOGON
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Group Policy Creator Owners
        Double-Take Admin
        Exchange Domain Servers
        Double-Take Monitors
        Exchange Mailbox Access
        Double-Take Recall
        Domain Users
        WebMarshal - Standard Users
        Web users
        Schema Admins
        SBS Report Users
        Enterprise Admins
        SBS Mobile Users
        SophosAdministrator
        Exchange Enterprise Servers
        Offer Remote Assistance Helpers
        High Mandatory Level

C:\Users\administrator.RICHCORPSERV>
Darius Ghassem

Are you sure you went to OU and block GPO inheritance?
aslsupport

ASKER
positive.

nothing shows up in teh group policy inheriatence box and i have a blue exlamation mark on the OU in question.
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
Darius Ghassem

Well should be blocking all GPOs but it is not.

Something within the GPO is causing the slowness.
aslsupport

ASKER
sorry i was running gpresult as administrator and not as the user I had dropped into the OU

here is the results run as the user inside the blocked gpo OU. as expected no gpo's being applied yet still running slow

C:\Users\pierre>gpresult /r

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 08/08/2011 at 15:11:01


RSOP data for RICHCORPSERV\pierre on SVR06 : Logging Mode
----------------------------------------------------------

OS Configuration:            Member Server
OS Version:                  6.1.7601
Site Name:                   N/A
Roaming Profile:             N/A
Local Profile:               C:\Users\pierre
Connected over a slow link?: No


USER SETTINGS
--------------
    CN=Pierre Jehan,OU=2008,DC=richcorpserv,DC=com
    Last time Group Policy was applied: 08/08/2011 at 15:09:14
    Group Policy was applied from:      richsvr.richcorpserv.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        RICHCORPSERV
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        N/A

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        Remote Desktop Users
        BUILTIN\Users
        REMOTE INTERACTIVE LOGON
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Medium Mandatory Level

C:\Users\pierre>



Darius Ghassem

Good. So, where is it slow now? Logging? Where during login? Just through RDP, right?

Post ipconfig /all for me.

Make sure you have most updated network drivers installed

Remove any AV installed

Check this out this helped with an issue just like yours looked like GPO issue but wasn't

http://cmorse.org/blog/archives/111
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
aslsupport

ASKER
hi

its slow through the whole login process. approx 30 seconds on welcome screen and up to a minute applying user settings.

there is no AV on there. it is running on a citrix xenserver and all the drivers are up to date

Ethernet adapter Local Area Connection 2:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Citrix PV Ethernet Adapter
   Physical Address. . . . . . . . . : A2-75-22-48-B2-C3
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.180.16(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.180.254
   DNS Servers . . . . . . . . . . . : 192.168.180.1
   NetBIOS over Tcpip. . . . . . . . : Disabled
aslsupport

ASKER
Further find.

when copying a file from DC to xp or 2003 I find it is quick and as expected results.

however when copying file from 2003 DC to new 2008r2 box it is serioulsy slow.

if i copy from xp or 2003 to the new 2008r2 boxes again the results are quick and as exptected.

Darius Ghassem

SO, copying to the 2003 server from 2008 server is slow?
Your help has saved me hundreds of hours of internet surfing.
fblack61
aslsupport

ASKER
either way to or from the 2003 DC.

but from a 2003 or xp client it is fine.
Darius Ghassem

ASKER CERTIFIED SOLUTION
aslsupport

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
aslsupport

ASKER
Finally found this
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.