Slow logon to Windows 2003 Domains

[Karen]

Dear Anybody

Slow logon to Windows 2003 Domains

We have recently installed Server 2003 and are trying to get all our computers on the domain. We are however experiencing problems when logging on from Windows XP systems (only Windows XP) - it takes two minutes to log onto the domain.

We have seen the FAQ concerning slow logon to Windows 2000 domains and have implemented the steps to enable XP to wait for the network at start-up but this does not seem to work. Below is an explanation of the settings that were made.

1) We log on to the machine (this computer) and not the domain.
2) We then Run MMC
3) Go to File -> Add/Remove Snap-in and select the Add button
4) From the list we select to add the Group Policy Snap-in and say OK
5) Go to Computer Configuration -> System -> Logon
6) Set "Always wait for the network at computer start-up and logon" to Enabled

Once this setting is made we log off from the machine and log on to the domain. The logon time is reduced to 10-15 seconds, BUT only once. As soon as the user logs off and logs back on again it reverts back to taking two minutes. If one now resets "Always wait for the network at computer start-up and logon" by disabling it, applying and enabling it again, the logon will be fast again. But once again only for the first logon. The next time the user logs on it will be slow again and the variable must be reset.

This setting is also only effective if it was set when the user was logged on to the machine (this computer). If the setting is done while logged onto the domain it has no effect and the log on always takes two minutes.

If anybody has a solution on either XP or Server 2003 can you please send a detailed step-by-step explanation on how to implement it because we are new Server 2003 users.


Kind Regards

Karen Bester
__________________________________________________ __________________

[Tom Decaluwe]

hmm, when reading over you post i believe you are setting the setting in the local computer policy and not on in a domain controlers policy. This thought seems to be backed by the fact that a setting is being overwritten eacht time you logon to the network.

I would suggest setting "Always wait for the network at computer start-up and logon" in a real Domain based group policy (not the default policies)

What you should do is:

1) Logon to the 2003 DC or any other server or computer using a domain admin account

2) start up run > gpmc.msc => this is the new group policy manager. If you don't have it yet definetely download it from the ms site http://www.microsoft.com/downloads/d...displaylang=en

3) create a new group policy > set the setting "Always wait for the network at computer start-up and logon"

4) link this group policy to the OU where your computers are in, if they are still in the default computers container you can attach the gpo at the root level of the active directory tree.

5) on the client computer run 2 commands from the dos box

c:\>gpupdate /foce
c:\>gpresult

=> check after gpresult if your newly applied group policy is activated on the computer

6) reboot the client and hope this does the trick.

I'm sorry if i am a bit vague about how to setup a new group policy but if you need to know how to do this there are much better white papers out there.

kind regards,

Tom Decaluwé

Och and by the way if you are new to Group policies do some reading to get some basic know how and they by Mr Moskowitz book as it is by far the best one i have read but then again i have not read the new resource kit book yet from MS but i know Jeremy's book wil always be on my top shelf :wink: