+ Post New Thread
Results 1 to 10 of 10
Windows Server 2000/2003 Thread, Slooooooow logons in Technical; Hello, We've had this issue for at least three years, but never found the root cause so I'm seeing if ...
  1. #1

    Join Date
    Apr 2008
    Location
    Keighley, West Yorks
    Posts
    419
    Thank Post
    62
    Thanked 68 Times in 54 Posts
    Rep Power
    25

    Slooooooow logons

    Hello,

    We've had this issue for at least three years, but never found the root cause so I'm seeing if anyone happens to have a magic wand lying around.

    Basically sometime in June, usually earlier rather than later, we will find that our two secondary DCs start hitting 100% CPU and everyone on those servers struggles to login at the start of lessons. 15 minutes into the lesson and everything will generally settle down until the next lesson.

    This might go on for a few days, despite rebooting all DCs, then disappear again.

    We only ever get this in June time, possibly into July, then when kids come back in September it is never a problem.

    It usually affects our PC-based language exams, so we moved their user accounts onto the FRDC which isn't usually affected, but the problem only started today this year.

    I can't think of any date-based / season-based reason for this? I had a theory at one point that it was Art using loads of large PSDs in whichever module they teach at this time of the year, but I've discounted that.

    Any suggestions, however daft they sound, welcomed!

    Peter

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    A long winded approach but getting a wireshark packet capture and slowly working through it would show you what was happening at the network level and may shed some light.

  3. #3
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,291
    Thank Post
    219
    Thanked 238 Times in 206 Posts
    Rep Power
    76
    I assume theres no scheduled task hidden away on those servers? Or a strange full anti-virus system scan with a schedule?

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,374
    Thank Post
    906
    Thanked 1,811 Times in 1,559 Posts
    Blog Entries
    12
    Rep Power
    468
    If your on 2003 switch to a newer version that has more resources etc. I bet a few quid you will notice its fine then. Thanks

  5. #5
    Grey-gear's Avatar
    Join Date
    Nov 2009
    Location
    Derby
    Posts
    574
    Thank Post
    44
    Thanked 78 Times in 62 Posts
    Rep Power
    69
    Does this problem only happen to students or is it for all users?

    I do think @SYNACK idea is were you will need to start, but as a guess as this has happens last few years around about this time do you have a number of the staff stream Wimbledon?

  6. #6

    Join Date
    Apr 2008
    Location
    Keighley, West Yorks
    Posts
    419
    Thank Post
    62
    Thanked 68 Times in 54 Posts
    Rep Power
    25
    Quote Originally Posted by SYNACK View Post
    A long winded approach but getting a wireshark packet capture and slowly working through it would show you what was happening at the network level and may shed some light.
    Yeah, I wish I knew how to use it - I can get the capture, but reading what it tells me is another question.

    Quote Originally Posted by themightymrp View Post
    I assume theres no scheduled task hidden away on those servers? Or a strange full anti-virus system scan with a schedule?
    AV scans are all configured by Sophos Enterprise Console. The only task I didn't know about on there is the RM Server Backup which hasn't run since 2006 cos we don't use it any more

    Quote Originally Posted by FN-GM View Post
    If your on 2003 switch to a newer version that has more resources etc. I bet a few quid you will notice its fine then. Thanks
    As it happens, we've got a brand new domain and servers lined up on our VMs ready to switch at summer - to hopefully get rid of ancient gremlins which have upgraded from NT thru 2003 - but that doesn't help my students at this moment, and I'd like to solve the problem anyway!

    Quote Originally Posted by Grey-gear View Post
    Does this problem only happen to students or is it for all users?
    Anyone on those servers.

    I do think @SYNACK idea is were you will need to start, but as a guess as this has happens last few years around about this time do you have a number of the staff stream Wimbledon?
    Hehe, good point - but no, the internet is fine.

    Peter

  7. #7

    Join Date
    Jan 2013
    Posts
    130
    Thank Post
    25
    Thanked 15 Times in 14 Posts
    Rep Power
    6
    Group Policies? I noticed our login times are extending as we add more GPOs, nothing that hammers our DCs tho.

    I'd break out prefmon as well as wireshark and find out what is consuming the resources. Also event log is worth trawling during those times.

  8. #8
    Grey-gear's Avatar
    Join Date
    Nov 2009
    Location
    Derby
    Posts
    574
    Thank Post
    44
    Thanked 78 Times in 62 Posts
    Rep Power
    69
    What are the tasks that are making the DC CPU hit 100%?

  9. #9

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,279
    Thank Post
    115
    Thanked 247 Times in 197 Posts
    Blog Entries
    1
    Rep Power
    76
    Or give MS PSS a call and for £200 they will find it for you.

  10. #10

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    The idea with wireshark would be to run a summary on the connections to see if there are a lot of a certain type of connection from a certain client or clients at the time of the issue. You would probably want to set up a mirror port on your switch to mirror the traffic from your server to a capture pc so as not to put more load on the server and run performance counter logging on the server to give you a graph of when it was maxing.

    This is another bit of software that has a bunch of summarizing features that may help that takes the place of wireshark Packetyzer | Free software downloads at SourceForge.net

    You could also look for other TCP type issues by following this:
    Wireshark TCP Troubleshooting - YouTube

    The packet dump will be HUGE over the course of a day so will take some serious time to run summaries on and go through so make sure your capture machine is beefy with a stack of free space to store all of the inbound and outbound traffic your server deals with during the capture.


    I usually use Wireshark/packetyzer/microsoft network monitor as a last resort because it is such a huge amount of data but it does shine a light on exactly what is happening on the network (assuming the issue is on the network).



SHARE:
+ Post New Thread

Similar Threads

  1. AUP logon acceptance program
    By mark in forum Downloads
    Replies: 10
    Last Post: 12th May 2010, 09:15 PM
  2. Limit Logon VBS Version
    By ChrisH in forum Scripts
    Replies: 29
    Last Post: 17th August 2009, 03:47 PM
  3. BGInfo on logon screen
    By Ric_ in forum Windows
    Replies: 17
    Last Post: 16th September 2006, 02:25 AM
  4. copying a file at logon
    By browolf in forum Windows
    Replies: 1
    Last Post: 18th October 2005, 05:26 PM
  5. Power Settings on Logon Screen
    By mattpant in forum Windows
    Replies: 19
    Last Post: 15th September 2005, 08:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •