Vdi login time

I have a xendesktop 5.6 vdi environment built on 2008 hyperv,emc storage .Have 25 desktops all non persistent.4gb write cache.we have win7 32 bit os image with just ms office lync,outlook and ie8

Currently only 5 users are logging and max 3 concurrent users.We observe that login time to windows takes around a minute.Can anyone suggest what could be reasons and what to look at to improve login time.We have sufficient bandwidth and don't believe we have iops issue as even if one user logs in issue is there
Sukku13Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mcannetCommented:
Two things:
1. Group Policy objects - do you have any, have you tried putting the virtual desktops in an OU blocking policies and seeing what that does to your logon times.  By doing this we found that some of our policies were causing longer logon times and we made changes as necessary.  I'm running about 25-30 second logons.

2. Have you tweaked the windows 7 desktop for performance, shutting off unneeded services, things like that?  

I run vmware view and they had a great guide to tweaking windows 7, perhaps citrix has one as well?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Sukku13Author Commented:
One more point to highlight is my golden imagr..vdisk is on nas
0
Ayman BakrSenior ConsultantCommented:
You are saying the login time is taking around 1 min. What about viewing Windows before the credentials?

One more thing you need to check apart from GPOs. Do you have folder redirection in place? Make folder redirection for 'Documents', 'Desktop' and perhaps 'Application Data'.
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Sukku13Author Commented:
We have folder redirection...
When I login using citrix URL...the page comes with windows desktop icon...when I click it then there is nothing more I need to punch the windows page comes and then login process starts which last more than a min..,we checked its not policy issue..one guy was saying hyperv 2008r2 has some legacy nic which is only 100mbps..still no clear clarity on issue
0
Sukku13Author Commented:
We are having non persistent desktops
0
Ayman BakrSenior ConsultantCommented:
Do you have TrendMicro as antivirus installed? If yes then check this:

http://forums.citrix.com/thread.jspa?threadID=311446
0
Sukku13Author Commented:
We have sep..no trendmicro
0
Ayman BakrSenior ConsultantCommented:
Well, it is very difficult to tell what is causing the delay to login without any further information, logs and special tools to analyze (if you have EdgeSight in place this will help a lot)! But the fact that login takes considerably an unacceptable time, definitely means there is a problem in the users' profiles.

Common problems causing the issue:
1. Profile of the user is very large in size
2. Connectivity to the profile repository is not efficient
3. GPO complexities
4. Number of printers to load is very large

The best way to tackle profile issues as Jo Harder, an EE colleague, said is to have an optimal profile system in place.

But with only 5 users in your environment, it would be easier and worth the revisit to optimize their profiles.
0
Sukku13Author Commented:
Will a tool like loginvsi help us in cracking
0
Ayman BakrSenior ConsultantCommented:
I have never used this tool; but from a quick look at what it does, this tool is for load testing: that is to determine the sizing and scalability of your environment. It is similar to EdgeSight for load testing.

However, when I mentioned EdgeSight in my earlier post, I meant EdgeSight for monitoring. This is different from EdgeSight for Load Testing. EdgeSight for monitoring can be used to monitor the performance in addition to user logins and help in pinpoint where the delay is happening.

So unless loginvsi has something additional to load testing, I don't think it will help in this specific situation.
0
Sukku13Author Commented:
Will lakeside systrack monitor and pinpoint..I have seen agent can pinpoint issues in desktop
0
Ayman BakrSenior ConsultantCommented:
I haven't used this either!! It might, but in the main description they speak about tracking the session - which I assume relates to post logging and not during loggin.

Why not address them for querying about whether it helps in such a situation and whether they can provide you with a trial/POC version.

But, are you entitled to EdgeSight Monitoring? If yes, then go ahead and using it. Otherwise, make it simple and look how you could optimize the user profiles - perhaps use profile management which is better than Windows', e.g. Citrix Profile Management (it is free).
0
Sukku13Author Commented:
with enterprise edition i dont have edge sight

Do you mean to use citrix UPM and see if i can stream profiles or cache it so that when we login it does not pull in the entire profile.I am using non-persistent VDI..pooled VM's and always keep atleast 10 VM in my farm up and running to save boot time.

when we addressed the legacy NIC issue of Hyper v now login time has reduced from over 2 minutes to 48 seconds..but our target is to bring it under 30 s
0
Ayman BakrSenior ConsultantCommented:
With Citrix UPM profiles are managed better than on Windows. Combined with folder redirection you should expect better performances. UPM will store user profiles in a shared repository configured through GPO - this should also be valid even if you are using non-persistent VDIs.

Speaking of Hyper-V: I have not really used it before, but I understand that synthetic NICs perform much better than legacy ones, but you need to install the Hyper V integration services on all your VMs. Legacy NICs causes additional processing overheads. I am sure this will reduce your login times.

Moreover try disabling TCP task offloading on your NICs.
0
Sukku13Author Commented:
Will upm caching etc will help in any manner..im using citix pvs not any mcs services..mine s not any vdi in box soln..
0
Ayman BakrSenior ConsultantCommented:
In your case deleting locally cached copies on log off while enabling profile streaming would be a better option. This article will help:

http://blogs.citrix.com/2012/11/30/to-cache-or-not-to-cache-that-is-the-question/
0
Sukku13Author Commented:
Enabled always cache 0 with profile streaming..no improvement.
I checked today my env..we have roaming profile..each vm has 4gb write cache and 2.gb ram..at a time more tham 10 pooled.vms are kept in power on..or boot state..have basic win 7 golden image with ms office..lync 2013
0
Sukku13Author Commented:
Also guest vm and write cache use san and base image and profile use NAS
0
Ayman BakrSenior ConsultantCommented:
Then you are optimum on the profile side.

Back to NIC configurations. Have you tried to use the synthetic NICs instead of the Legacy ones? Using the synthetic NICs with the hyper-V integration software will reduce overheads perhaps as much as 30% to 40%.

In parallel, please disable task offloading on the NICs. To see how, check this:

http://www.windowsreference.com/networking/enabledisable-tcp-task-offloading-to-nic-in-windows/
0
Sukku13Author Commented:
Wats synthetic NIC..my tech team was telling legacy nic in 2008 r2 hyperv has 100 mbps limitation so they r writing somescript to switch to normal nic once pxe boot happens
0
Ayman BakrSenior ConsultantCommented:
Synthetic NICs are the native NICs used by the VMs on the Hyper-V which is designed to reduce CPU and memory overheads. The legacy NICs, or emulated NICs, add CPU and RAM overhead and is experienced through delays, such as logon delays.

Please see the 'Optimize Network Performance' in this msdn article:
http://msdn.microsoft.com/en-us/library/dd722835(v=bts.10).aspx

When you configure synthetic NICs instead of the legacy NICs, ensure you do the following in your Citrix VM environment:
http://support.citrix.com/article/CTX128750
0
Sukku13Author Commented:
Will symantec end point
n my golden image cause login issues..

Is there any sep policy guidelines for vdi..will t be same as our current
Physical pc policy or would need some relaxation
0
Ayman BakrSenior ConsultantCommented:
Well, yes might be.

To verify it, make a VM with no SEP and test the login time.

You may want to play with the policies on the SEP Manager console to make endpoint protection auto-launch when SEP starts instead of the default when computer starts.

As for policies; please check the XenApp and XenDesktop Policy Planning Guide White paper:
http://support.citrix.com/servlet/KbServlet/download/31435-102-696944/Planning%20Guide%20-%20Citrix%20XenApp%20and%20XenDesktop%20Policies.pdf
0
joharderCommented:
Sorry for the late response, but yes, EdgeSight will help you immensely as it will show how the amount of time each aspect of the login is utilizing.  With Enterprise Edition, you do have EdgeSight, but not all data, e.g., network-related items.

It's a bit of work to set up EdgeSight, but the answer will immediately be available.  The Session Startup Duration Details report is exactly what you need, and there is no other medium for gathering this data.

One area that immediately comes to mind  ... Is there a GPO or login script that is timing out because it cannot be accessed?  This shows up as 30-second delay.  Most commonly, a GPO that is not applying correctly or a login script that no longer exists causes these delays.  Pull up a GPResult and verify.
0
Sukku13Author Commented:
So u mean I can use existing limited edgesight feature to identify
From where ill run gpresult..sorry im not much techie do need to advise my citrix tech team n this
0
Ayman BakrSenior ConsultantCommented:
You will run gpresult on the virtual desktop to see what GPOs applied and what didn't.
0
Sukku13Author Commented:
If I identify that some gp is getting timed out..wats next step should I remove it or see if it can be rectified and proceed
0
Ayman BakrSenior ConsultantCommented:
Depending on what the GPO does. If it is not really important and there will be no effect or impact from removing it, then remove it. Otherwise, you need to look at options for resolving the issue - please see this:

http://technet.microsoft.com/en-us/magazine/2007.02.troubleshooting.aspx
0
kabilanisCommented:
If this issue is not resolved. You can try the below.

1. Enable GPSVC log and see if the Group policies are being fetched from local DC. Else, you can have settings in the DNS server to contact the internal DC

2. Enabled Verbose login message dispaly. This will show you the detailed login, instead of the Welcome screen. You can see which process is taking more time.

In my case it was "Applying User Profile Settings..." and we found that copying of profile from Roaming profile location was very slow due to Symantec.

Then we had to work with the Symantec team for tweaking it.
0
Sukku13Author Commented:
Where to set verbose msg display
0
kabilanisCommented:
1.Click Start, and then click Run.
2.In the Open box, type gpedit.msc, and then click OK.
3.Expand Computer Configuration, expand Administrative Templates, and then click System.
4.In the right pane, double-click Verbose vs normal status messages.
5.Click Enabled, and then click OK.
6.Close Group Policy Object Editor, and then click OK.

Note : Windows ignores this setting if the Remove Boot / Shutdown / Logon / Logoff status messages setting is turned on

http://support.microsoft.com/kb/325376
0
LeeTutorretiredCommented:
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Citrix

From novice to tech pro — start learning today.