slow Active Directory connections on non-default VLAN

[m2d2]

We have a strange problem. Computers on non-default VLANs take a long time to process Computer Settings policies. It also takes a long time to go from the log on box to showing the desktop when a user logs in. It can take as long as five minutes from power up to a full log on.

 

After a user has logged in there doesn’t appear to be further problems with network speed. Access to the file shares or networked printers is at normal speeds. There are no unusual slowdowns when accessing the Internet. In fact if the computer was not on the domain you would not notice there was a speed problem at all.

 

Computers on the default VLAN act like normal domain clients with no slow downs during start up or during login.

 

Can’t see what we have missed. Should there be such a big difference in the operation of domain clients on different VLANs?

 

Any ideas? TIA.

[cpjitservices]

what kit are you using ?

[m2d2]

HP ProCurve switches through out.

[FN-GM]

Have you added the IP ranges to Sites and Services? Have you also created Reverse Lookup Zones in DNS

[m2d2]

Oh. Forgot completely about site and services. I thought it applied more to computers in geographically distant locations.

 

Still doesn't explain why active directory operations succeed on non-default VLANs but with a noticeable delay.

 

Confused

[FN-GM]

Oh. Forgot completely about site and services. I thought it applied more to computers in geographically distant locations.

 

Still doesn't explain why active directory operations succeed on non-default VLANs but with a noticeable delay.

 

Confused

 

When it works well are the servers and clients in the same VLAN?

[m2d2]

When it works well are the servers and clients in the same VLAN?

 

No. The servers and clients are in different VLANs.

[FN-GM]

No. The servers and clients are in different VLANs.

 

Are all the default gateways setup correctly? (on the switches and clients)

[m2d2]

Yes. This is the first thing we checked. We can ping the servers and also get out to the Internet.