british-wave Posted September 6, 2005 Posted September 6, 2005 I have a big issue here that it takes ages (in paticualr win xp SP 2)machnies to log in to the network. There is sufficiant network capacity bandwidth and the server is of a good spec. If I log in with an admin account its quick. I think it may be something to do with GP but dont really know where to start looking to resolve the problem. I would appreciate any pointers from anyone else who has had the same problem and managed to resolve it. Even if it is not the solution its somthing to bear in mind. It does this every time you log in so its not a cold boot issue. Any help would be greatly appreciated and there may be a prize for the one who sorts it for me :-)
tarquel Posted September 6, 2005 Posted September 6, 2005 Ok.... Can you tell us more on how you have setup your GP and user groups? i.e. some of the questions that come to mind are: - do you have different User groups? and is it happening to every different user group (i.e. staff, pupil, special, evening, guest, etc)? er... i did have more but not feeling too good at the moment Has your network drastically changed at all? I used to have the DNS address set in TCP/IP on the cflient pc's which sped up logon - otherwise the clients would search the WAN for the DNS / DC server. Since setting up the firewall/router, i have had to remove that setting and leave it on automatic, but you might want to try it on a client to see whether that helps But pls post nore regarding your setup so we can suggest more. Cheers N.
MkII Posted September 6, 2005 Posted September 6, 2005 Do you have roaming profiles? Is your server 2000 or 2003? So what clients do you have? and they log in in less time?? Do you have scripts running as well - can you test the logon speed bypassing them?
eejit Posted September 6, 2005 Posted September 6, 2005 Do you apply a lot of seperate group policies to the users/machines - we found that this makes a difference..
tarquel Posted September 6, 2005 Posted September 6, 2005 that was them questions i forgot mark lol N.
mac_shinobi Posted September 7, 2005 Posted September 7, 2005 Probably a stupid question but does it only do that with the xp sp2 machines or is it the same for xp sp 1. Just curious since I have had a lot of problems with SP 2 and also it probably has more to do with the other things that were mentioned above Im just being curious is all
british-wave Posted September 7, 2005 Author Posted September 7, 2005 WE have two policies one for staff and one for students. No staff have been complaining about slow log in times (other than the time it takes the kids to log in) Dont know much about the way the GP is set up as it was all set up by my predacessor and I have not really had the time to look through how it was set up . He did nt document anything either which makes it all the more annoying. As for the question of do I have thje same issue with SP1 as well and SP2. I dont know as I have not put any SP1 machines in place for the student to use. Do you have roaming profiles? Yes Is your server 2000 or 2003? We have one of each but the main one is a 2000 server. We are in the process of migrating to the new server. So what clients do you have? and they log in in less time?? 2000 machines appear to be slightly quicker but overall it would appear there is no difference. Do you have scripts running as well - can you test the logon speed bypassing them? The only ones we use are to map printers and map drives. I will try disabling the login script for the students and test. Will post the results. I tried the DNS entry on the client machine. It did make a slight difference but it is still far to long. Thanks for the suggestions
Ric_ Posted September 7, 2005 Posted September 7, 2005 Do you have roaming profiles? Yes You tried ditching your roaming profiles? Compare the profile sizes of the kids and the staff and see if there is any difference. Also check to see if the machines are caching the profiles (maybe the staff ones are cached and hence they log on quicker).
Geoff Posted September 7, 2005 Posted September 7, 2005 Dont know much about the way the GP is set up as it was all set up by my predacessor and I have not really had the time to look through how it was set up . He did nt document anything either which makes it all the more annoying. You might want to look at using the GPMC. It helps a lot understanding how your GPOs are setup and interacting. Do you have roaming profiles? Yes This is likely the problem. Do you use any folder redirection at all? Is your server 2000 or 2003? We have one of each but the main one is a 2000 server. We are in the process of migrating to the new server. Is the 2k3 server a domain controller? If it is, did you do the AD schema updates when you brought it online? I tried the DNS entry on the client machine. It did make a slight difference but it is still far to long. Is your windows DNS server the only IP listed in the clients DNS server list or are you using external DNS servers as well?
british-wave Posted September 7, 2005 Author Posted September 7, 2005 I have looked at the eventviewer on a machine and it is generating event ID 1217 Execution of GPO scripts has timed out and have been terminated. Event ID 1085 The Group Policy client-side extension Security failed to execute. Please look for any errors reported earlier by that extension. Event ID 1202 Security policies were propagated with warning. 0x4b8 : An extended error has occurred. For best results in resolving this event, log on with a non-administrative account and search http://support.microsoft.com for "Troubleshooting Event 1202' Ive not had chance to look at any other sites other then eventID.net which does not give away too much. Time to carry on plodding through sites to find a solution. Unless anyone else knows !! I have read somewhere that it may be group policy corruption. I hope not!!
Ric_ Posted September 7, 2005 Posted September 7, 2005 Use the GPMC to view the results of a logon by a pupil. It will give you a pretty page with big warning signs where things have gone tits up!
Thomas Posted September 7, 2005 Posted September 7, 2005 Yes - GPMC! I didn't even think of that...still so stuck on using 2000.
SteveT Posted September 8, 2005 Posted September 8, 2005 Do you use Sophos by any chance?? http://www.sophos.com/support/knowledgebase/article/3024.html
mac_shinobi Posted September 8, 2005 Posted September 8, 2005 " british wave - whats wrong with sophos ?
british-wave Posted September 8, 2005 Author Posted September 8, 2005 Nothing is wrong with Sophos. Our LEA pays for ours from Network Associates. Quite nice of them really. We find NA works here but my preference is sophos on large networks. If we had to change that would be my first choice.
MkII Posted September 8, 2005 Posted September 8, 2005 @gecko: There was a documented problem that specifically caused slow logons - discussed in a previous thread.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now