Slow logon from XP client
Claus Stahnke
I have a setup with a win2003 sbs server being DNS server, a router being
DHCP server, several win2000 clients that use the server as file server
(not joined to the domain), and a few winxp clients that are joined the
domain.
All the win2k clients, and all except one of the winxp clients work fine.
No problems with internet, no problems with exchange, no problems with
printers, and no problems with accessing shared folders on the server.
BUT, the last winxp client slows to a crawl when logging on to the domain.
It finally gets in though, but i.e. opening a shared folder takes ages.
If I logon to the macine locally, not onto the domain, everything works
fine, including the access to shared folders and exchange, even though it
did give me problems to set up printers.
The machine was previously installed with win2000, but after a severe
harddisk crash, I reinstalled it with winxp.
I set it up as a member of a workgroup, and after winxp installed, I joined
it to the domain through the "connectcomputer" routine.
I have tested DNS setup on the server, and since everything works fine for
the other users I believe it to be OK.
But other threads suggest connectivity from winxp usually is a dns problem,
so I post to this group.
DNS on the client in question is correctly set to IP of server.
Any ideas ? - I'm going crazy over this one...
T.I.A.
Kevin D. Goodknecht Sr. [MVP]
Claus Stahnke <cs@*removethis*add2web.dk> typed:
Try nslookup -d2 <ADDomainName>
What's the full result?
Netdiag (From the support tools on the XP CD) can help diagnose this, too.
--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================
Fred
issue and I would love to know how to resolve it. This has been
driving me nuts for a long time. Thanks!
Microemission24
Hi Kevin,
Thanks for taking time.
I have tried the suggested lookup, and here's the results:
Microsoft Windows XP [version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\>nslookup -d2 domainname
------------
SendRequest(), len 42
HEADER:
opcode = QUERY, id = 1, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0,
additional = 0
QUESTIONS:
2.1.168.192.in-addr.arpa, type = PTR, class = IN
------------
------------
Got answer (81 bytes):
HEADER:
opcode = QUERY, id = 1, rcode = NOERROR
header flags: response, auth. answer, want recursion,
recursion avail.
questions = 1, answers = 1, authority records = 0,
additional = 0
QUESTIONS:
2.1.168.192.in-addr.arpa, type = PTR, class = IN
ANSWERS:
-> 2.1.168.192.in-addr.arpa
type = PTR, class = IN, dlen = 27
name = server1.domainname.local
ttl = 1200 (20 mins)
------------
Server: server1.domainname.local
Address: 192.168.1.2
------------
SendRequest(), len 47
HEADER:
opcode = QUERY, id = 2, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0,
additional = 0
QUESTIONS:
domainname.Domainname.local, type = A, class = IN
------------
------------
Got answer (118 bytes):
HEADER:
opcode = QUERY, id = 2, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion,
recursion avail.
questions = 1, answers = 0, authority records = 1,
additional = 0
QUESTIONS:
domainname.Domainname.local, type = A, class = IN
AUTHORITY RECORDS:
-> domainname.local
type = SOA, class = IN, dlen = 42
ttl = 3600 (1 hour)
primary name server = server1.domainname.local
responsible mail addr = hostmaster
serial = 522
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 (1 day)
default TTL = 3600 (1 hour)
------------
*** server1.domainname.local can't find domainname: Non-existent
domain
C:\>
Is this helpful ?
domainname
Does this help ?
Claus Stahnke
news:OnHxfcLW...@TK2MSFTNGP05.phx.gbl:
Hi Kevin,
Kevin D. Goodknecht Sr. [MVP]
Microemission24 <claus@_removethis_stahnke.dk> typed:
> I have tried the suggested lookup, and here's the results:
>
> Microsoft Windows XP [version 5.1.2600]
> (C) Copyright 1985-2001 Microsoft Corp.
>
>
> C:\>nslookup -d2 domainname
> *** server1.domainname.local can't find domainname: Non-existent
> domain
I guess I should have been a little more clear, you were supposed to
substitute "domainname" with your AD Domain Name, which I did not know.
nslookup -d2 domainname.local
--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Claus Stahnke
news:uxOSJAPW...@TK2MSFTNGP02.phx.gbl:
> In news:7s4832lb6bq7mb9vv...@4ax.com,
> Microemission24 <claus@_removethis_stahnke.dk> typed:
>> I have tried the suggested lookup, and here's the results:
>>
>> Microsoft Windows XP [version 5.1.2600]
>> (C) Copyright 1985-2001 Microsoft Corp.
>>
>>
>> C:\>nslookup -d2 domainname
> <snip>
>> *** server1.domainname.local can't find domainname: Non-existent
>> domain
>
> I guess I should have been a little more clear, you were supposed to
> substitute "domainname" with your AD Domain Name, which I did not
know.
>
> nslookup -d2 domainname.local
>
Hi Kevin
Actually I did.
But since I would rather not post the actual domain name on usenet, I
have substituted it back in the response.
If the response text reads "domainname" it read the actual domain name,
starting with a lowercase letter
If it reads "Domainname" it was starting with an Uppercase letter.
I hope you understand.
Kevin D. Goodknecht Sr. [MVP]
Claus Stahnke <cs@*removethis*add2web.dk> typed:
> Actually I did.
>
> But since I would rather not post the actual domain name on usenet, I
> have substituted it back in the response.
>
> If the response text reads "domainname" it read the actual domain
> name, starting with a lowercase letter
> If it reads "Domainname" it was starting with an Uppercase letter.
>
> I hope you understand.
So, you are saying that your Active Directory domain's name is a
single-label name "domainname" This causes big problems for Windows XP and
Windows 2000 SP4 and later.
300684 - Information About Configuring Windows 2000 for Domains with
Single-Label DNS Names
http://support.microsoft.com/default.aspx?scid=kb;en-us;300684&sd=RMVP
SBS 2003 cannot register in a single-label zone, and it may not have the
netlogon records registered, until the entries in the above article are
made.
I apologize if I'm not clear about what I'm looking for but, if XP is slow
to logon, it is because it is unable to locate the SRV records for the DC. I
would also expect the SBS 2003 would exhibit the same behavior. IT is also
very important that all domain members use the SBS IP address only for DNS,
not the router and certainly not an ISP DNS.
You should install (if not already) the server support tools from the SBS CD
on SBS and the support tools from the XP CD on the XP and run the netdiag
tool from a command prompt.
From the SBS I would like for you to run netdiag /fix and netdiag /test:dns
/v and post the errors from the /test:dns /v test. Running netdiag /v from
the XP will tell me if it is able to locate the domain controller.
--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Claus Stahnke
news:O7VOkjY...@TK2MSFTNGP05.phx.gbl:
Hi kevin,
I guess I didn't do it right the first time.
The domain name is actually something like "Mydomain.local" and I guess
that qualifies as not being single-label.
I did the nslookup again with those settings, and got this result (where
the actual domain name has been substituted with "mydomain"):
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>nslookup -d2 mydomain.local
------------
SendRequest(), len 42
HEADER:
opcode = QUERY, id = 1, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional
= 0
QUESTIONS:
2.1.168.192.in-addr.arpa, type = PTR, class = IN
------------
------------
Got answer (81 bytes):
HEADER:
opcode = QUERY, id = 1, rcode = NOERROR
header flags: response, auth. answer, want recursion, recursion
avail.
questions = 1, answers = 1, authority records = 0, additional
= 0
QUESTIONS:
2.1.168.192.in-addr.arpa, type = PTR, class = IN
ANSWERS:
-> 2.1.168.192.in-addr.arpa
type = PTR, class = IN, dlen = 27
name = server1.mydomain.local
ttl = 1200 (20 mins)
------------
Server: server1.mydomain.local
Address: 192.168.1.2
------------
SendRequest(), len 53
HEADER:
opcode = QUERY, id = 2, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional
= 0
QUESTIONS:
mydomain.local.Mydomain.local, type = A, class = IN
------------
------------
Got answer (124 bytes):
HEADER:
opcode = QUERY, id = 2, rcode = NXDOMAIN
header flags: response, auth. answer, want recursion, recursion
avail.
questions = 1, answers = 0, authority records = 1, additional
= 0
QUESTIONS:
mydomain.local.Mydomain.local, type = A, class = IN
AUTHORITY RECORDS:
-> mydomain.local
type = SOA, class = IN, dlen = 42
ttl = 3600 (1 hour)
primary name server = server1.mydomain.local
responsible mail addr = hostmaster
serial = 526
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 (1 day)
default TTL = 3600 (1 hour)
------------
------------
SendRequest(), len 35
HEADER:
opcode = QUERY, id = 3, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional
= 0
QUESTIONS:
mydomain.local, type = A, class = IN
------------
------------
Got answer (67 bytes):
HEADER:
opcode = QUERY, id = 3, rcode = NOERROR
header flags: response, auth. answer, want recursion, recursion
avail.
questions = 1, answers = 2, authority records = 0, additional
= 0
QUESTIONS:
mydomain.local, type = A, class = IN
ANSWERS:
-> mydomain.local
type = A, class = IN, dlen = 4
internet address = 192.168.1.2
ttl = 600 (10 mins)
-> mydomain.local
type = A, class = IN, dlen = 4
internet address = 192.168.31.2
ttl = 600 (10 mins)
------------
Name: mydomain.local
Addresses: 192.168.1.2, 192.168.31.2
C:\Documents and Settings\Administrator>
I have a feeling my problems are connected with the response of two
addresse for the domain, could this be it ?
(there's only one nic in the server)
Kevin D. Goodknecht Sr. [MVP]
Claus Stahnke <cs@*removethis*add2web.dk> typed:
> Name: mydomain.local
> Addresses: 192.168.1.2, 192.168.31.2
>
>
> C:\Documents and Settings\Administrator>
>
>
> I have a feeling my problems are connected with the response of two
> addresse for the domain, could this be it ?
> (there's only one nic in the server)
It could very well be, especially since one is on the wrong subnet. Do you
know where this address may have come from?
If you delete the record from DNS does it return after a short while?
Is there a record with the same IP that has a host name besides (same as
parent folder)?
I'd still like to see a netdiag /v test from both the DC and the XP client.
--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Claus Stahnke
question.
The extra ip number on the server seems to come from sometime a go, when
the server was initially setup, somebody had set it up with a wrong ip-
number, and then did the wizzard to change the ip.
I have tried to delete the (wrong) number, but it keeps getting back.
this is the result of the test:(myDomain has been substituted for the
real domain name ):
Media State: Connected
Device State: Connected
Connect Time: 6 days, 13:08:56
Media Speed: 100 Mbps
Packets Sent: 403964
Bytes Sent (Optional): 79654765
Packets Received: 392669
Directed Pkts Recd (Optional): 350266
Bytes Received (Optional): 86793307
Directed Bytes Recd (Optional): 86793307
Packets SendError: 14
Packets RecvError: 2
------------------------------------------------------------------------
---
Description: 1394-netvrkskort
Device: \DEVICE\{BC8AE5BA-AF33-4F0C-83AD-7F55FB203586}
Media State: Connected
Device State: Connected
Connect Time: 6 days, 13:08:59
Media Speed: 400 Mbps
Packets Sent: 0
Bytes Sent (Optional): 0
Packets Received: 0
Directed Pkts Recd (Optional): 0
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0
[WARNING] The net card '1394-netvrkskort' may not be working because
it has not received any packets.
------------------------------------------------------------------------
---
[PASS] - At least one netcard is in the 'Connected' state.
Per interface results:
Adapter : LAN-forbindelse
Adapter ID . . . . . . . . : {9EC6C2EF-0338-4883-AADF-
DA33437550C9}
Netcard queries test . . . : Passed
Global results:
Domain membership test . . . . . . : Passed
Machine is a . . . . . . . . . : Member Workstation
Netbios Domain name. . . . . . : MYDOMAIN
Dns domain name. . . . . . . . : MyDomain.local
Dns forest name. . . . . . . . : MyDomain.local
Domain Guid. . . . . . . . . . : {5146C75A-BD71-4363-B9E1-
9FA8F64CFD31}
Domain Sid . . . . . . . . . . : S-1-5-21-2220758917-1880578891-
854532856
Logon User . . . . . . . . . . : MyUserName
Logon Domain . . . . . . . . . : MYDOMAIN
Logon Server . . . . . . . . . : \\SERVER1
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{9EC6C2EF-0338-4883-AADF-DA33437550C9}
1 NetBt transport currently configured.
DNS test . . . . . . . . . . . . . : Passed
Interface {9EC6C2EF-0338-4883-AADF-DA33437550C9}
DNS Domain:
DNS Servers: 192.168.1.2
IP Address: 192.168.1.102
Expected registration with PDN (primary DNS domain name):
Hostname: JUM1.MyDomain.local.
Authoritative zone: MyDomain.local.
Primary DNS server: server1.MyDomain.local 192.168.1.2
Authoritative NS:192.168.1.2
Verify DNS registration:
Name: JUM1.MyDomain.local
Expected IP: 192.168.1.102
Server 192.168.1.2: NO_ERROR
The DNS registration for JUM1.MyDomain.local is correct on all DNS
servers
The command completed successfully
Claus Stahnke <cs@*removethis*add2web.dk> wrote in
news:Xns979DEEC54598Bcs...@207.46.248.16:
Kevin D. Goodknecht Sr. [MVP]
> I have finally had the opportynity to do a test on the workstation in
> question.
>
> The extra ip number on the server seems to come from sometime a go,
> when the server was initially setup, somebody had set it up with a
> wrong ip- number, and then did the wizzard to change the ip.
> I have tried to delete the (wrong) number, but it keeps getting back.
> this is the result of the test:(myDomain has been substituted for the
> real domain name ):
The netdiag looks OK though you didn't do all the tests, that's why I wanted
netdiag /v from the workstation.
In addition, post the ipconfig /all from the DC to see if we can find where
that IP is coming from.
--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Claus Stahnke
news:uMnDzCdX...@TK2MSFTNGP03.phx.gbl:
> Claus Stahnke wrote:
>> I have finally had the opportynity to do a test on the workstation in
>> question.
>>
>> The extra ip number on the server seems to come from sometime a go,
>> when the server was initially setup, somebody had set it up with a
>> wrong ip- number, and then did the wizzard to change the ip.
>> I have tried to delete the (wrong) number, but it keeps getting back.
>> this is the result of the test:(myDomain has been substituted for the
>> real domain name ):
>
> The netdiag looks OK though you didn't do all the tests, that's why I
> wanted netdiag /v from the workstation.
>
> In addition, post the ipconfig /all from the DC to see if we can find
> where that IP is coming from.
>
Hi Kevin,
Thanks for staying with me.
Here's the ipconfig/all from the DC
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : server1
Primary Dns Suffix . . . . . . . : MyDomainname.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : MyDomainname.local
Ethernet adapter Server Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7760 Gigabit Server Adapter
Physical Address. . . . . . . . . : 00-12-79-3A-7C-6C
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.2
Primary WINS Server . . . . . . . : 192.168.1.2
Kevin D. Goodknecht Sr. [MVP]
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : server1
> Primary Dns Suffix . . . . . . . : MyDomainname.local
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : Yes
> WINS Proxy Enabled. . . . . . . . : Yes
> DNS Suffix Search List. . . . . . : MyDomainname.local
>
> Ethernet adapter Server Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : HP NC7760 Gigabit Server
> Adapter Physical Address. . . . . . . . . : 00-12-79-3A-7C-6C
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.1.2
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.1.1
> DNS Servers . . . . . . . . . . . : 192.168.1.2
> Primary WINS Server . . . . . . . : 192.168.1.2
>
> C:\Documents and Settings\Administrator>
Check your WINS database, one of the drawbacks to WINS is when an interface
is removed from a machine, it will leave the old interface IP in WINS for
several days before it is deleted from the database.
--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Claus Stahnke
news:OpxuNvkX...@TK2MSFTNGP03.phx.gbl:
> Claus Stahnke wrote:
>
>> C:\Documents and Settings\Administrator>ipconfig /all
>>
>> Windows IP Configuration
>>
>> Host Name . . . . . . . . . . . . : server1
>> Primary Dns Suffix . . . . . . . : MyDomainname.local
>> Node Type . . . . . . . . . . . . : Unknown
>> IP Routing Enabled. . . . . . . . : Yes
>> WINS Proxy Enabled. . . . . . . . : Yes
>> DNS Suffix Search List. . . . . . : MyDomainname.local
>>
>> Ethernet adapter Server Local Area Connection:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : HP NC7760 Gigabit Server
>> Adapter Physical Address. . . . . . . . . : 00-12-79-3A-7C-6C
>> DHCP Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 192.168.1.2
>> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>> Default Gateway . . . . . . . . . : 192.168.1.1
>> DNS Servers . . . . . . . . . . . : 192.168.1.2
>> Primary WINS Server . . . . . . . : 192.168.1.2
>>
>> C:\Documents and Settings\Administrator>
>
> Check your WINS database, one of the drawbacks to WINS is when an
> interface is removed from a machine, it will leave the old interface
> IP in WINS for several days before it is deleted from the database.
>
I will, but this has been going on for several weeks..