| Author |
 Topic  |
|
|
rmoore@afsc.org
Here To Stay
USA
260 Posts
Status: offline |
 Posted - 05/15/2012 : 12:26:43 PM
|
I have a bit of a long story here. Our organization has offices all over the country. Roughly 15 of those offices had Windows 2003 DCs. A few months ago, we demoted all the remote DCs, retaining two DCs here in our home office. Those two DCs were Windows 2008. Once all the 2003 DCs were demoted, I raised our functional level to 2008. The remote servers are still in use at their remote sites, but they are no longer DCs. They still provide DNS, DHCP, WINS, file services, etc., for the computers in each of their offices.
Now here's the problem. In some of those remote sites, Windows XP workstations have very long logon times--up to 45 minutes or more, they sit at "Applying Settings" after the user puts in his/her password. Windows 7 workstations do not exhibit this behavior. We've tried removing them from the domain and rejoining them, but that didn't help. We've gathered logs while this long logon time was taking place in order to try to see what's going on. We got some messages that say the machine is looking for the old DC.
I can't find any references to the old DC in our DNS. One thing that seems to fix the problem is if we tell the workstations to only use the remaining DCs for DNS, and not to use their demoted DCs for DNS. We'd rather not have to do that, though.
Any ideas about what might be going on and how to fix it? Is there something in the registry we ought to try deleting?
Thanks,
Rob
|
|
|
don2007
Honorable But Hopeless Addict
1975 Posts
Status: offline |
Posted - 05/15/2012 : 4:17:18 PM
|
I had the problem once & I'm trying to think of how I solved it. If there is a local admin at the site, let him login with the admin account. If that doesn't hang, then it's something with the user profile. If it does hang, I would look for something in the startup. Are roaming profiles used?
I remember hitting enter during the time the login was hanging, the process finished & the user was connected. |
Dyslexic people untie. |
 |
|
|
Pieter
Old Timer
Belgium
522 Posts
Status: offline |
Posted - 05/16/2012 : 02:12:17 AM
|
| All DCs were and are in the same domain ? You did not do a migration ? |
Pieter Demeulemeester |
|
|
|
rmoore@afsc.org
Here To Stay
USA
260 Posts
Status: offline |
Posted - 05/16/2012 : 08:14:13 AM
|
Yes, all DCs were and are in the same domain.
I'll check into the profile issue. That's something I haven't thought of. These are not roaming profiles. But if we unplug the network cable, the process finishes quickly. Then you plug the cable back in and go. Not a long term fix, but it's a workaround.
Rob |
|
|
|
Endaar
Old Timer
USA
569 Posts
Status: offline |
Posted - 05/16/2012 : 10:03:53 AM
|
Can you do a fresh install of XP (from Windows media, not an image) on a test PC and join it to the domain? That would establish if the delay is something cached on the PCs or something incorrect remaining in your DC/DNS configuration.
James |
|
|
|
rmoore@afsc.org
Here To Stay
USA
260 Posts
Status: offline |
Posted - 05/16/2012 : 10:52:18 AM
|
I might have to try that. Not terribly convenient, but it might be doable.
Rob |
|
|
|
mazaffar
Seasoned But Casual Onlooker
83 Posts
Status: offline |
Posted - 06/14/2012 : 03:44:41 AM
|
It might have something to do with group policies. XP may need server 2003 for GPOs to apply.
Mazaffar. |
|
|
|
Rastor728
Old Timer
USA
736 Posts
Status: offline |
Posted - 06/15/2012 : 10:54:11 PM
|
quote:
Originally posted by mazaffar
It might have something to do with group policies. XP may need server 2003 for GPOs to apply.
Mazaffar.
You would need Group Client Side extensions installed on the server and XP workstations if you are using 2008 DC's with XP Workstations. |
What would Clark Kent do to someone who stole his identity? |
|
|
|
rmoore@afsc.org
Here To Stay
USA
260 Posts
Status: offline |
Posted - 06/18/2012 : 10:20:17 AM
|
I've got the Client Side Extensions installed on all my XP and 2003 computers, pushed out via WSUS.
Rob |
|
|
|
AndreyAD
Welcome Newcomer
7 Posts
Status: offline |
Posted - 06/20/2012 : 12:25:32 PM
|
have you tested your netlogon service?
dcdiag /test:netlogons
did you already check your sites & services for the right DC distribution accordling to the sites/subnets?
another suggestion could be raise the debug logging level for the netlogon service
nltest /dbflag:2080FFFF
And this is to disable the debug logging level:
nltest /dbflag:0×0
Maybe you can find out more iformation that can help on your troubleshoot,
|
|
|
|
AndreyAD
Welcome Newcomer
7 Posts
Status: offline |
Posted - 06/20/2012 : 12:46:32 PM
|
And I forgot to mention:
- Check the W32TM for all the Domain Controllers : W32TM /monitor
And XP have a feature named, fast logon optimization:
http://support.microsoft.com/kb/305293 |
|
|
| |
Topic |
|
Slow Logon For XP Workstations
