Long time taking for Single user to logon

Hi there,

I am having an issue with user account/group membership.

I have a remote site where 30-40 users work via VPN/Firewall.

All users login to the domain normally but for a single user it take more
than 15 mnutes. Also user cant access any share. It happens with this user
only. There are number of group for which user is member of, however I have
observed that when I add any of four groups say
ab_all
cd_all
ef_all and gh_all. Issue starts.

If I remove these groups from user's member of list, it starts working
normally.

Steps I performed for troublehsooting this.

1. I have created new user account with user's name by renaming his old
account.
2. Asked user to login from some diffrent system from the same site.
3. Checked with some other user to login from his system, other users login
normally but this user cant.
4. I have enabled userenv.log for debugging. Found log as below.


Userenv.log say as.



USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: critical section
initialized
USERENV(478.47c) 11:31:29:531 CSyncManager::Initialize: critical section
initialized
USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: registry key
Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
USERENV(478.47c) 11:31:29:546 CUserProfile::Initialize: Proccessing
S-1-5-21-3941269898-4162109257-75492585-500
USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock
<S-1-5-21-3941269898-4162109257-75492585-500>
USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: No existing entry found
USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: New entry created
USERENV(478.47c) 11:31:29:546 CHashTable::HashAdd:
S-1-5-21-3941269898-4162109257-75492585-500 added in bucket 2
USERENV(478.47c) 11:31:29:562 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(478.47c) 11:31:29:562 CUserProfile::GetRefCountAndFlags: Ref count
is 0, state is 00000100
USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock
<S-1-5-21-3941269898-4162109257-75492585-500>
USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock: Lock released
USERENV(478.47c) 11:31:29:562 CHashTable::HashDelete:
S-1-5-21-3941269898-4162109257-75492585-500 deleted
USERENV(478.47c) 11:31:29:578 CSyncManager::LeaveLock: Lock deleted
USERENV(478.47c) 11:31:29:578 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(478.47c) 11:31:29:578 CUserProfile::Initialize: Proccessing
S-1-5-21-3941269898-4162109257-75492585-1003
USERENV(478.47c) 11:31:29:578 CSyncManager::EnterLock
<S-1-5-21-3941269898-4162109257-75492585-1003>
USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: No existing entry found
USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: New entry created
USERENV(478.47c) 11:31:29:593 CHashTable::HashAdd:
S-1-5-21-3941269898-4162109257-75492585-1003 added in bucket 3
USERENV(478.47c) 11:31:29:593 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(478.47c) 11:31:29:593 CUserProfile::GetRefCountAndFlags: Ref count
is 0, state is 00000100
USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock
<S-1-5-21-3941269898-4162109257-75492585-1003>
USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock released
USERENV(478.47c) 11:31:29:609 CHashTable::HashDelete:
S-1-5-21-3941269898-4162109257-75492585-1003 deleted
USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock deleted
USERENV(478.47c) 11:31:29:625 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(478.47c) 11:31:29:625 CUserProfile::Initialize: Proccessing
S-1-5-21-1957844674-164910922-1384523041-6808
USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock
<S-1-5-21-1957844674-164910922-1384523041-6808>
USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: No existing entry found
USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: New entry created
USERENV(478.47c) 11:31:29:640 CHashTable::HashAdd:
S-1-5-21-1957844674-164910922-1384523041-6808 added in bucket 2
USERENV(478.47c) 11:31:29:640 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(478.47c) 11:31:29:640 CUserProfile::GetRefCountAndFlags: Ref count
is 0, state is 00000100
USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock
<S-1-5-21-1957844674-164910922-1384523041-6808>
USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock: Lock released




I am very Frustrated now and dont know what to do.

Can somebody help me in this please.






--
Jaywant Kamble.

--
Jaywant Kamble.



"Jaywant" wrote:

>
>
>
> Hi there,
>
> I am having an issue with user account/group membership.
>
> I have a remote site where 30-40 users work via VPN/Firewall.
>
> All users login to the domain normally but for a single user it take more
> than 15 mnutes. Also user cant access any share. It happens with this user
> only. There are number of group for which user is member of, however I have
> observed that when I add any of four groups say
> ab_all
> cd_all
> ef_all and gh_all. Issue starts.
>
> If I remove these groups from user's member of list, it starts working
> normally.
>
> Steps I performed for troublehsooting this.
>
> 1. I have created new user account with user's name by renaming his old
> account.
> 2. Asked user to login from some diffrent system from the same site.
> 3. Checked with some other user to login from his system, other users login
> normally but this user cant.
> 4. I have enabled userenv.log for debugging. Found log as below.
>
>
> Userenv.log say as.
>
>
>
> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: critical section
> initialized
> USERENV(478.47c) 11:31:29:531 CSyncManager::Initialize: critical section
> initialized
> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: registry key
> Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
> USERENV(478.47c) 11:31:29:546 CUserProfile::Initialize: Proccessing
> S-1-5-21-3941269898-4162109257-75492585-500
> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock
> <S-1-5-21-3941269898-4162109257-75492585-500>
> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: No existing entry found
> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: New entry created
> USERENV(478.47c) 11:31:29:546 CHashTable::HashAdd:
> S-1-5-21-3941269898-4162109257-75492585-500 added in bucket 2
> USERENV(478.47c) 11:31:29:562 CUserProfile::CleanupUserProfile: Enter
> critical section.
> USERENV(478.47c) 11:31:29:562 CUserProfile::GetRefCountAndFlags: Ref count
> is 0, state is 00000100
> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock
> <S-1-5-21-3941269898-4162109257-75492585-500>
> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock: Lock released
> USERENV(478.47c) 11:31:29:562 CHashTable::HashDelete:
> S-1-5-21-3941269898-4162109257-75492585-500 deleted
> USERENV(478.47c) 11:31:29:578 CSyncManager::LeaveLock: Lock deleted
> USERENV(478.47c) 11:31:29:578 CUserProfile::CleanupUserProfile: Leave
> critical section
> USERENV(478.47c) 11:31:29:578 CUserProfile::Initialize: Proccessing
> S-1-5-21-3941269898-4162109257-75492585-1003
> USERENV(478.47c) 11:31:29:578 CSyncManager::EnterLock
> <S-1-5-21-3941269898-4162109257-75492585-1003>
> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: No existing entry found
> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: New entry created
> USERENV(478.47c) 11:31:29:593 CHashTable::HashAdd:
> S-1-5-21-3941269898-4162109257-75492585-1003 added in bucket 3
> USERENV(478.47c) 11:31:29:593 CUserProfile::CleanupUserProfile: Enter
> critical section.
> USERENV(478.47c) 11:31:29:593 CUserProfile::GetRefCountAndFlags: Ref count
> is 0, state is 00000100
> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock
> <S-1-5-21-3941269898-4162109257-75492585-1003>
> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock released
> USERENV(478.47c) 11:31:29:609 CHashTable::HashDelete:
> S-1-5-21-3941269898-4162109257-75492585-1003 deleted
> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock deleted
> USERENV(478.47c) 11:31:29:625 CUserProfile::CleanupUserProfile: Leave
> critical section
> USERENV(478.47c) 11:31:29:625 CUserProfile::Initialize: Proccessing
> S-1-5-21-1957844674-164910922-1384523041-6808
> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock
> <S-1-5-21-1957844674-164910922-1384523041-6808>
> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: No existing entry found
> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: New entry created
> USERENV(478.47c) 11:31:29:640 CHashTable::HashAdd:
> S-1-5-21-1957844674-164910922-1384523041-6808 added in bucket 2
> USERENV(478.47c) 11:31:29:640 CUserProfile::CleanupUserProfile: Enter
> critical section.
> USERENV(478.47c) 11:31:29:640 CUserProfile::GetRefCountAndFlags: Ref count
> is 0, state is 00000100
> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock
> <S-1-5-21-1957844674-164910922-1384523041-6808>
> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock: Lock released
>
>
>
>
> I am very Frustrated now and dont know what to do.
>
> Can somebody help me in this please.
>
> Domain is Win 2k3 , 2000 mixed.
>
>
>
>
> --
> Jaywant Kamble.
>

Hello Jaywant,

Any chance that the user is member of an Universal Group? This kind of group
requires contact to a Global catalog server for logon.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi there,
>
> I am having an issue with user account/group membership.
>
> I have a remote site where 30-40 users work via VPN/Firewall.
>
> All users login to the domain normally but for a single user it take
> more
> than 15 mnutes. Also user cant access any share. It happens with this
> user
> only. There are number of group for which user is member of, however I
> have
> observed that when I add any of four groups say
> ab_all
> cd_all
> ef_all and gh_all. Issue starts.
> If I remove these groups from user's member of list, it starts working
> normally.
>
> Steps I performed for troublehsooting this.
>
> 1. I have created new user account with user's name by renaming his
> old
> account.
> 2. Asked user to login from some diffrent system from the same site.
> 3. Checked with some other user to login from his system, other users
> login
> normally but this user cant.
> 4. I have enabled userenv.log for debugging. Found log as below.
> Userenv.log say as.
>
> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: critical
> section
> initialized
> USERENV(478.47c) 11:31:29:531 CSyncManager::Initialize: critical
> section
> initialized
> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: registry key
> Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
> USERENV(478.47c) 11:31:29:546 CUserProfile::Initialize: Proccessing
> S-1-5-21-3941269898-4162109257-75492585-500
> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock
> <S-1-5-21-3941269898-4162109257-75492585-500>
> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: No existing
> entry found
> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: New entry
> created
> USERENV(478.47c) 11:31:29:546 CHashTable::HashAdd:
> S-1-5-21-3941269898-4162109257-75492585-500 added in bucket 2
> USERENV(478.47c) 11:31:29:562 CUserProfile::CleanupUserProfile: Enter
> critical section.
> USERENV(478.47c) 11:31:29:562 CUserProfile::GetRefCountAndFlags: Ref
> count
> is 0, state is 00000100
> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock
> <S-1-5-21-3941269898-4162109257-75492585-500>
> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock: Lock released
> USERENV(478.47c) 11:31:29:562 CHashTable::HashDelete:
> S-1-5-21-3941269898-4162109257-75492585-500 deleted
> USERENV(478.47c) 11:31:29:578 CSyncManager::LeaveLock: Lock deleted
> USERENV(478.47c) 11:31:29:578 CUserProfile::CleanupUserProfile: Leave
> critical section
> USERENV(478.47c) 11:31:29:578 CUserProfile::Initialize: Proccessing
> S-1-5-21-3941269898-4162109257-75492585-1003
> USERENV(478.47c) 11:31:29:578 CSyncManager::EnterLock
> <S-1-5-21-3941269898-4162109257-75492585-1003>
> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: No existing
> entry found
> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: New entry
> created
> USERENV(478.47c) 11:31:29:593 CHashTable::HashAdd:
> S-1-5-21-3941269898-4162109257-75492585-1003 added in bucket 3
> USERENV(478.47c) 11:31:29:593 CUserProfile::CleanupUserProfile: Enter
> critical section.
> USERENV(478.47c) 11:31:29:593 CUserProfile::GetRefCountAndFlags: Ref
> count
> is 0, state is 00000100
> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock
> <S-1-5-21-3941269898-4162109257-75492585-1003>
> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock released
> USERENV(478.47c) 11:31:29:609 CHashTable::HashDelete:
> S-1-5-21-3941269898-4162109257-75492585-1003 deleted
> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock deleted
> USERENV(478.47c) 11:31:29:625 CUserProfile::CleanupUserProfile: Leave
> critical section
> USERENV(478.47c) 11:31:29:625 CUserProfile::Initialize: Proccessing
> S-1-5-21-1957844674-164910922-1384523041-6808
> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock
> <S-1-5-21-1957844674-164910922-1384523041-6808>
> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: No existing
> entry found
> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: New entry
> created
> USERENV(478.47c) 11:31:29:640 CHashTable::HashAdd:
> S-1-5-21-1957844674-164910922-1384523041-6808 added in bucket 2
> USERENV(478.47c) 11:31:29:640 CUserProfile::CleanupUserProfile: Enter
> critical section.
> USERENV(478.47c) 11:31:29:640 CUserProfile::GetRefCountAndFlags: Ref
> count
> is 0, state is 00000100
> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock
> <S-1-5-21-1957844674-164910922-1384523041-6808>
> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock: Lock released
> I am very Frustrated now and dont know what to do.
>
> Can somebody help me in this please.
>

Hi Meinolf,



User is member of two Universal - Security Group and four Global - Security
group.




--
Jaywant Kamble.



"Meinolf Weber [MVP-DS]" wrote:

> Hello Jaywant,
>
> Any chance that the user is member of an Universal Group? This kind of group
> requires contact to a Global catalog server for logon.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi there,
> >
> > I am having an issue with user account/group membership.
> >
> > I have a remote site where 30-40 users work via VPN/Firewall.
> >
> > All users login to the domain normally but for a single user it take
> > more
> > than 15 mnutes. Also user cant access any share. It happens with this
> > user
> > only. There are number of group for which user is member of, however I
> > have
> > observed that when I add any of four groups say
> > ab_all
> > cd_all
> > ef_all and gh_all. Issue starts.
> > If I remove these groups from user's member of list, it starts working
> > normally.
> >
> > Steps I performed for troublehsooting this.
> >
> > 1. I have created new user account with user's name by renaming his
> > old
> > account.
> > 2. Asked user to login from some diffrent system from the same site.
> > 3. Checked with some other user to login from his system, other users
> > login
> > normally but this user cant.
> > 4. I have enabled userenv.log for debugging. Found log as below.
> > Userenv.log say as.
> >
> > USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: critical
> > section
> > initialized
> > USERENV(478.47c) 11:31:29:531 CSyncManager::Initialize: critical
> > section
> > initialized
> > USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: registry key
> > Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
> > USERENV(478.47c) 11:31:29:546 CUserProfile::Initialize: Proccessing
> > S-1-5-21-3941269898-4162109257-75492585-500
> > USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock
> > <S-1-5-21-3941269898-4162109257-75492585-500>
> > USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: No existing
> > entry found
> > USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: New entry
> > created
> > USERENV(478.47c) 11:31:29:546 CHashTable::HashAdd:
> > S-1-5-21-3941269898-4162109257-75492585-500 added in bucket 2
> > USERENV(478.47c) 11:31:29:562 CUserProfile::CleanupUserProfile: Enter
> > critical section.
> > USERENV(478.47c) 11:31:29:562 CUserProfile::GetRefCountAndFlags: Ref
> > count
> > is 0, state is 00000100
> > USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock
> > <S-1-5-21-3941269898-4162109257-75492585-500>
> > USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock: Lock released
> > USERENV(478.47c) 11:31:29:562 CHashTable::HashDelete:
> > S-1-5-21-3941269898-4162109257-75492585-500 deleted
> > USERENV(478.47c) 11:31:29:578 CSyncManager::LeaveLock: Lock deleted
> > USERENV(478.47c) 11:31:29:578 CUserProfile::CleanupUserProfile: Leave
> > critical section
> > USERENV(478.47c) 11:31:29:578 CUserProfile::Initialize: Proccessing
> > S-1-5-21-3941269898-4162109257-75492585-1003
> > USERENV(478.47c) 11:31:29:578 CSyncManager::EnterLock
> > <S-1-5-21-3941269898-4162109257-75492585-1003>
> > USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: No existing
> > entry found
> > USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: New entry
> > created
> > USERENV(478.47c) 11:31:29:593 CHashTable::HashAdd:
> > S-1-5-21-3941269898-4162109257-75492585-1003 added in bucket 3
> > USERENV(478.47c) 11:31:29:593 CUserProfile::CleanupUserProfile: Enter
> > critical section.
> > USERENV(478.47c) 11:31:29:593 CUserProfile::GetRefCountAndFlags: Ref
> > count
> > is 0, state is 00000100
> > USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock
> > <S-1-5-21-3941269898-4162109257-75492585-1003>
> > USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock released
> > USERENV(478.47c) 11:31:29:609 CHashTable::HashDelete:
> > S-1-5-21-3941269898-4162109257-75492585-1003 deleted
> > USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock deleted
> > USERENV(478.47c) 11:31:29:625 CUserProfile::CleanupUserProfile: Leave
> > critical section
> > USERENV(478.47c) 11:31:29:625 CUserProfile::Initialize: Proccessing
> > S-1-5-21-1957844674-164910922-1384523041-6808
> > USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock
> > <S-1-5-21-1957844674-164910922-1384523041-6808>
> > USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: No existing
> > entry found
> > USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: New entry
> > created
> > USERENV(478.47c) 11:31:29:640 CHashTable::HashAdd:
> > S-1-5-21-1957844674-164910922-1384523041-6808 added in bucket 2
> > USERENV(478.47c) 11:31:29:640 CUserProfile::CleanupUserProfile: Enter
> > critical section.
> > USERENV(478.47c) 11:31:29:640 CUserProfile::GetRefCountAndFlags: Ref
> > count
> > is 0, state is 00000100
> > USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock
> > <S-1-5-21-1957844674-164910922-1384523041-6808>
> > USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock: Lock released
> > I am very Frustrated now and dont know what to do.
> >
> > Can somebody help me in this please.
> >
>
>
> .
>

Hello Jaywant,

See here about group scopes and if it doesn't apply don't use the universal
groups. Then check again with the logon.
http://technet.microsoft.com/en-us/l...92(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Meinolf,
>
> User is member of two Universal - Security Group and four Global -
> Security group.
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Jaywant,
>>
>> Any chance that the user is member of an Universal Group? This kind
>> of group requires contact to a Global catalog server for logon.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi there,
>>>
>>> I am having an issue with user account/group membership.
>>>
>>> I have a remote site where 30-40 users work via VPN/Firewall.
>>>
>>> All users login to the domain normally but for a single user it take
>>> more
>>> than 15 mnutes. Also user cant access any share. It happens with
>>> this
>>> user
>>> only. There are number of group for which user is member of, however
>>> I
>>> have
>>> observed that when I add any of four groups say
>>> ab_all
>>> cd_all
>>> ef_all and gh_all. Issue starts.
>>> If I remove these groups from user's member of list, it starts
>>> working
>>> normally.
>>> Steps I performed for troublehsooting this.
>>>
>>> 1. I have created new user account with user's name by renaming his
>>> old
>>> account.
>>> 2. Asked user to login from some diffrent system from the same site.
>>> 3. Checked with some other user to login from his system, other
>>> users
>>> login
>>> normally but this user cant.
>>> 4. I have enabled userenv.log for debugging. Found log as below.
>>> Userenv.log say as.
>>> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: critical
>>> section
>>> initialized
>>> USERENV(478.47c) 11:31:29:531 CSyncManager::Initialize: critical
>>> section
>>> initialized
>>> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: registry key
>>> Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
>>> USERENV(478.47c) 11:31:29:546 CUserProfile::Initialize: Proccessing
>>> S-1-5-21-3941269898-4162109257-75492585-500
>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock
>>> <S-1-5-21-3941269898-4162109257-75492585-500>
>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: No existing
>>> entry found
>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: New entry
>>> created
>>> USERENV(478.47c) 11:31:29:546 CHashTable::HashAdd:
>>> S-1-5-21-3941269898-4162109257-75492585-500 added in bucket 2
>>> USERENV(478.47c) 11:31:29:562 CUserProfile::CleanupUserProfile:
>>> Enter
>>> critical section.
>>> USERENV(478.47c) 11:31:29:562 CUserProfile::GetRefCountAndFlags: Ref
>>> count
>>> is 0, state is 00000100
>>> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock
>>> <S-1-5-21-3941269898-4162109257-75492585-500>
>>> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock: Lock released
>>> USERENV(478.47c) 11:31:29:562 CHashTable::HashDelete:
>>> S-1-5-21-3941269898-4162109257-75492585-500 deleted
>>> USERENV(478.47c) 11:31:29:578 CSyncManager::LeaveLock: Lock deleted
>>> USERENV(478.47c) 11:31:29:578 CUserProfile::CleanupUserProfile:
>>> Leave
>>> critical section
>>> USERENV(478.47c) 11:31:29:578 CUserProfile::Initialize: Proccessing
>>> S-1-5-21-3941269898-4162109257-75492585-1003
>>> USERENV(478.47c) 11:31:29:578 CSyncManager::EnterLock
>>> <S-1-5-21-3941269898-4162109257-75492585-1003>
>>> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: No existing
>>> entry found
>>> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: New entry
>>> created
>>> USERENV(478.47c) 11:31:29:593 CHashTable::HashAdd:
>>> S-1-5-21-3941269898-4162109257-75492585-1003 added in bucket 3
>>> USERENV(478.47c) 11:31:29:593 CUserProfile::CleanupUserProfile:
>>> Enter
>>> critical section.
>>> USERENV(478.47c) 11:31:29:593 CUserProfile::GetRefCountAndFlags: Ref
>>> count
>>> is 0, state is 00000100
>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock
>>> <S-1-5-21-3941269898-4162109257-75492585-1003>
>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock released
>>> USERENV(478.47c) 11:31:29:609 CHashTable::HashDelete:
>>> S-1-5-21-3941269898-4162109257-75492585-1003 deleted
>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock deleted
>>> USERENV(478.47c) 11:31:29:625 CUserProfile::CleanupUserProfile:
>>> Leave
>>> critical section
>>> USERENV(478.47c) 11:31:29:625 CUserProfile::Initialize: Proccessing
>>> S-1-5-21-1957844674-164910922-1384523041-6808
>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock
>>> <S-1-5-21-1957844674-164910922-1384523041-6808>
>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: No existing
>>> entry found
>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: New entry
>>> created
>>> USERENV(478.47c) 11:31:29:640 CHashTable::HashAdd:
>>> S-1-5-21-1957844674-164910922-1384523041-6808 added in bucket 2
>>> USERENV(478.47c) 11:31:29:640 CUserProfile::CleanupUserProfile:
>>> Enter
>>> critical section.
>>> USERENV(478.47c) 11:31:29:640 CUserProfile::GetRefCountAndFlags: Ref
>>> count
>>> is 0, state is 00000100
>>> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock
>>> <S-1-5-21-1957844674-164910922-1384523041-6808>
>>> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock: Lock released
>>> I am very Frustrated now and dont know what to do.
>>> Can somebody help me in this please.
>>>
>> .
>>

I would agree with you Meinolf, but I would wonder why the user wouldn't
have access to a GC? Jaywant can you describe your environment? DC's, DNS
server's and GC's. Topology (Sites).

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:. com...
> Hello Jaywant,
>
> See here about group scopes and if it doesn't apply don't use the
> universal groups. Then check again with the logon.
> http://technet.microsoft.com/en-us/l...92(WS.10).aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi Meinolf,
>>
>> User is member of two Universal - Security Group and four Global -
>> Security group.
>>
>> "Meinolf Weber [MVP-DS]" wrote:
>>
>>> Hello Jaywant,
>>>
>>> Any chance that the user is member of an Universal Group? This kind
>>> of group requires contact to a Global catalog server for logon.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers
>>> no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Hi there,
>>>>
>>>> I am having an issue with user account/group membership.
>>>>
>>>> I have a remote site where 30-40 users work via VPN/Firewall.
>>>>
>>>> All users login to the domain normally but for a single user it take
>>>> more
>>>> than 15 mnutes. Also user cant access any share. It happens with
>>>> this
>>>> user
>>>> only. There are number of group for which user is member of, however
>>>> I
>>>> have
>>>> observed that when I add any of four groups say
>>>> ab_all
>>>> cd_all
>>>> ef_all and gh_all. Issue starts.
>>>> If I remove these groups from user's member of list, it starts
>>>> working
>>>> normally.
>>>> Steps I performed for troublehsooting this.
>>>>
>>>> 1. I have created new user account with user's name by renaming his
>>>> old
>>>> account.
>>>> 2. Asked user to login from some diffrent system from the same site.
>>>> 3. Checked with some other user to login from his system, other
>>>> users
>>>> login
>>>> normally but this user cant.
>>>> 4. I have enabled userenv.log for debugging. Found log as below.
>>>> Userenv.log say as.
>>>> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: critical
>>>> section
>>>> initialized
>>>> USERENV(478.47c) 11:31:29:531 CSyncManager::Initialize: critical
>>>> section
>>>> initialized
>>>> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: registry key
>>>> Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
>>>> USERENV(478.47c) 11:31:29:546 CUserProfile::Initialize: Proccessing
>>>> S-1-5-21-3941269898-4162109257-75492585-500
>>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock
>>>> <S-1-5-21-3941269898-4162109257-75492585-500>
>>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: No existing
>>>> entry found
>>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: New entry
>>>> created
>>>> USERENV(478.47c) 11:31:29:546 CHashTable::HashAdd:
>>>> S-1-5-21-3941269898-4162109257-75492585-500 added in bucket 2
>>>> USERENV(478.47c) 11:31:29:562 CUserProfile::CleanupUserProfile:
>>>> Enter
>>>> critical section.
>>>> USERENV(478.47c) 11:31:29:562 CUserProfile::GetRefCountAndFlags: Ref
>>>> count
>>>> is 0, state is 00000100
>>>> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock
>>>> <S-1-5-21-3941269898-4162109257-75492585-500>
>>>> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock: Lock released
>>>> USERENV(478.47c) 11:31:29:562 CHashTable::HashDelete:
>>>> S-1-5-21-3941269898-4162109257-75492585-500 deleted
>>>> USERENV(478.47c) 11:31:29:578 CSyncManager::LeaveLock: Lock deleted
>>>> USERENV(478.47c) 11:31:29:578 CUserProfile::CleanupUserProfile:
>>>> Leave
>>>> critical section
>>>> USERENV(478.47c) 11:31:29:578 CUserProfile::Initialize: Proccessing
>>>> S-1-5-21-3941269898-4162109257-75492585-1003
>>>> USERENV(478.47c) 11:31:29:578 CSyncManager::EnterLock
>>>> <S-1-5-21-3941269898-4162109257-75492585-1003>
>>>> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: No existing
>>>> entry found
>>>> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: New entry
>>>> created
>>>> USERENV(478.47c) 11:31:29:593 CHashTable::HashAdd:
>>>> S-1-5-21-3941269898-4162109257-75492585-1003 added in bucket 3
>>>> USERENV(478.47c) 11:31:29:593 CUserProfile::CleanupUserProfile:
>>>> Enter
>>>> critical section.
>>>> USERENV(478.47c) 11:31:29:593 CUserProfile::GetRefCountAndFlags: Ref
>>>> count
>>>> is 0, state is 00000100
>>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock
>>>> <S-1-5-21-3941269898-4162109257-75492585-1003>
>>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock released
>>>> USERENV(478.47c) 11:31:29:609 CHashTable::HashDelete:
>>>> S-1-5-21-3941269898-4162109257-75492585-1003 deleted
>>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock deleted
>>>> USERENV(478.47c) 11:31:29:625 CUserProfile::CleanupUserProfile:
>>>> Leave
>>>> critical section
>>>> USERENV(478.47c) 11:31:29:625 CUserProfile::Initialize: Proccessing
>>>> S-1-5-21-1957844674-164910922-1384523041-6808
>>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock
>>>> <S-1-5-21-1957844674-164910922-1384523041-6808>
>>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: No existing
>>>> entry found
>>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: New entry
>>>> created
>>>> USERENV(478.47c) 11:31:29:640 CHashTable::HashAdd:
>>>> S-1-5-21-1957844674-164910922-1384523041-6808 added in bucket 2
>>>> USERENV(478.47c) 11:31:29:640 CUserProfile::CleanupUserProfile:
>>>> Enter
>>>> critical section.
>>>> USERENV(478.47c) 11:31:29:640 CUserProfile::GetRefCountAndFlags: Ref
>>>> count
>>>> is 0, state is 00000100
>>>> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock
>>>> <S-1-5-21-1957844674-164910922-1384523041-6808>
>>>> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock: Lock released
>>>> I am very Frustrated now and dont know what to do.
>>>> Can somebody help me in this please.
>>>>
>>> .
>>>
>
>

Hello Paul Bergson [MVP-DS],

Maybe a firewall blocking port 3268? So also UPN logon if used wan't be possible.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I would agree with you Meinolf, but I would wonder why the user
> wouldn't have access to a GC? Jaywant can you describe your
> environment? DC's, DNS server's and GC's. Topology (Sites).
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:. com...
>
>> Hello Jaywant,
>>
>> See here about group scopes and if it doesn't apply don't use the
>> universal groups. Then check again with the logon.
>> http://technet.microsoft.com/en-us/l...92(WS.10).aspx
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi Meinolf,
>>>
>>> User is member of two Universal - Security Group and four Global -
>>> Security group.
>>>
>>> "Meinolf Weber [MVP-DS]" wrote:
>>>
>>>> Hello Jaywant,
>>>>
>>>> Any chance that the user is member of an Universal Group? This kind
>>>> of group requires contact to a Global catalog server for logon.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hi there,
>>>>>
>>>>> I am having an issue with user account/group membership.
>>>>>
>>>>> I have a remote site where 30-40 users work via VPN/Firewall.
>>>>>
>>>>> All users login to the domain normally but for a single user it
>>>>> take
>>>>> more
>>>>> than 15 mnutes. Also user cant access any share. It happens with
>>>>> this
>>>>> user
>>>>> only. There are number of group for which user is member of,
>>>>> however
>>>>> I
>>>>> have
>>>>> observed that when I add any of four groups say
>>>>> ab_all
>>>>> cd_all
>>>>> ef_all and gh_all. Issue starts.
>>>>> If I remove these groups from user's member of list, it starts
>>>>> working
>>>>> normally.
>>>>> Steps I performed for troublehsooting this.
>>>>> 1. I have created new user account with user's name by renaming
>>>>> his
>>>>> old
>>>>> account.
>>>>> 2. Asked user to login from some diffrent system from the same
>>>>> site.
>>>>> 3. Checked with some other user to login from his system, other
>>>>> users
>>>>> login
>>>>> normally but this user cant.
>>>>> 4. I have enabled userenv.log for debugging. Found log as below.
>>>>> Userenv.log say as.
>>>>> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: critical
>>>>> section
>>>>> initialized
>>>>> USERENV(478.47c) 11:31:29:531 CSyncManager::Initialize: critical
>>>>> section
>>>>> initialized
>>>>> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: registry
>>>>> key
>>>>> Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
>>>>> USERENV(478.47c) 11:31:29:546 CUserProfile::Initialize:
>>>>> Proccessing
>>>>> S-1-5-21-3941269898-4162109257-75492585-500
>>>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock
>>>>> <S-1-5-21-3941269898-4162109257-75492585-500>
>>>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: No existing
>>>>> entry found
>>>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: New entry
>>>>> created
>>>>> USERENV(478.47c) 11:31:29:546 CHashTable::HashAdd:
>>>>> S-1-5-21-3941269898-4162109257-75492585-500 added in bucket 2
>>>>> USERENV(478.47c) 11:31:29:562 CUserProfile::CleanupUserProfile:
>>>>> Enter
>>>>> critical section.
>>>>> USERENV(478.47c) 11:31:29:562 CUserProfile::GetRefCountAndFlags:
>>>>> Ref
>>>>> count
>>>>> is 0, state is 00000100
>>>>> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock
>>>>> <S-1-5-21-3941269898-4162109257-75492585-500>
>>>>> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock: Lock
>>>>> released
>>>>> USERENV(478.47c) 11:31:29:562 CHashTable::HashDelete:
>>>>> S-1-5-21-3941269898-4162109257-75492585-500 deleted
>>>>> USERENV(478.47c) 11:31:29:578 CSyncManager::LeaveLock: Lock
>>>>> deleted
>>>>> USERENV(478.47c) 11:31:29:578 CUserProfile::CleanupUserProfile:
>>>>> Leave
>>>>> critical section
>>>>> USERENV(478.47c) 11:31:29:578 CUserProfile::Initialize:
>>>>> Proccessing
>>>>> S-1-5-21-3941269898-4162109257-75492585-1003
>>>>> USERENV(478.47c) 11:31:29:578 CSyncManager::EnterLock
>>>>> <S-1-5-21-3941269898-4162109257-75492585-1003>
>>>>> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: No existing
>>>>> entry found
>>>>> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: New entry
>>>>> created
>>>>> USERENV(478.47c) 11:31:29:593 CHashTable::HashAdd:
>>>>> S-1-5-21-3941269898-4162109257-75492585-1003 added in bucket 3
>>>>> USERENV(478.47c) 11:31:29:593 CUserProfile::CleanupUserProfile:
>>>>> Enter
>>>>> critical section.
>>>>> USERENV(478.47c) 11:31:29:593 CUserProfile::GetRefCountAndFlags:
>>>>> Ref
>>>>> count
>>>>> is 0, state is 00000100
>>>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock
>>>>> <S-1-5-21-3941269898-4162109257-75492585-1003>
>>>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock
>>>>> released
>>>>> USERENV(478.47c) 11:31:29:609 CHashTable::HashDelete:
>>>>> S-1-5-21-3941269898-4162109257-75492585-1003 deleted
>>>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock
>>>>> deleted
>>>>> USERENV(478.47c) 11:31:29:625 CUserProfile::CleanupUserProfile:
>>>>> Leave
>>>>> critical section
>>>>> USERENV(478.47c) 11:31:29:625 CUserProfile::Initialize:
>>>>> Proccessing
>>>>> S-1-5-21-1957844674-164910922-1384523041-6808
>>>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock
>>>>> <S-1-5-21-1957844674-164910922-1384523041-6808>
>>>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: No existing
>>>>> entry found
>>>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: New entry
>>>>> created
>>>>> USERENV(478.47c) 11:31:29:640 CHashTable::HashAdd:
>>>>> S-1-5-21-1957844674-164910922-1384523041-6808 added in bucket 2
>>>>> USERENV(478.47c) 11:31:29:640 CUserProfile::CleanupUserProfile:
>>>>> Enter
>>>>> critical section.
>>>>> USERENV(478.47c) 11:31:29:640 CUserProfile::GetRefCountAndFlags:
>>>>> Ref
>>>>> count
>>>>> is 0, state is 00000100
>>>>> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock
>>>>> <S-1-5-21-1957844674-164910922-1384523041-6808>
>>>>> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock: Lock
>>>>> released
>>>>> I am very Frustrated now and dont know what to do.
>>>>> Can somebody help me in this please.
>>>> .
>>>>

Hello Paul Bergson [MVP-DS],

Forget my last one, if a firewall blocks the port, logon shouldn't work doesn't
matter how long to wait.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I would agree with you Meinolf, but I would wonder why the user
> wouldn't have access to a GC? Jaywant can you describe your
> environment? DC's, DNS server's and GC's. Topology (Sites).
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:. com...
>
>> Hello Jaywant,
>>
>> See here about group scopes and if it doesn't apply don't use the
>> universal groups. Then check again with the logon.
>> http://technet.microsoft.com/en-us/l...92(WS.10).aspx
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi Meinolf,
>>>
>>> User is member of two Universal - Security Group and four Global -
>>> Security group.
>>>
>>> "Meinolf Weber [MVP-DS]" wrote:
>>>
>>>> Hello Jaywant,
>>>>
>>>> Any chance that the user is member of an Universal Group? This kind
>>>> of group requires contact to a Global catalog server for logon.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hi there,
>>>>>
>>>>> I am having an issue with user account/group membership.
>>>>>
>>>>> I have a remote site where 30-40 users work via VPN/Firewall.
>>>>>
>>>>> All users login to the domain normally but for a single user it
>>>>> take
>>>>> more
>>>>> than 15 mnutes. Also user cant access any share. It happens with
>>>>> this
>>>>> user
>>>>> only. There are number of group for which user is member of,
>>>>> however
>>>>> I
>>>>> have
>>>>> observed that when I add any of four groups say
>>>>> ab_all
>>>>> cd_all
>>>>> ef_all and gh_all. Issue starts.
>>>>> If I remove these groups from user's member of list, it starts
>>>>> working
>>>>> normally.
>>>>> Steps I performed for troublehsooting this.
>>>>> 1. I have created new user account with user's name by renaming
>>>>> his
>>>>> old
>>>>> account.
>>>>> 2. Asked user to login from some diffrent system from the same
>>>>> site.
>>>>> 3. Checked with some other user to login from his system, other
>>>>> users
>>>>> login
>>>>> normally but this user cant.
>>>>> 4. I have enabled userenv.log for debugging. Found log as below.
>>>>> Userenv.log say as.
>>>>> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: critical
>>>>> section
>>>>> initialized
>>>>> USERENV(478.47c) 11:31:29:531 CSyncManager::Initialize: critical
>>>>> section
>>>>> initialized
>>>>> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: registry
>>>>> key
>>>>> Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
>>>>> USERENV(478.47c) 11:31:29:546 CUserProfile::Initialize:
>>>>> Proccessing
>>>>> S-1-5-21-3941269898-4162109257-75492585-500
>>>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock
>>>>> <S-1-5-21-3941269898-4162109257-75492585-500>
>>>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: No existing
>>>>> entry found
>>>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: New entry
>>>>> created
>>>>> USERENV(478.47c) 11:31:29:546 CHashTable::HashAdd:
>>>>> S-1-5-21-3941269898-4162109257-75492585-500 added in bucket 2
>>>>> USERENV(478.47c) 11:31:29:562 CUserProfile::CleanupUserProfile:
>>>>> Enter
>>>>> critical section.
>>>>> USERENV(478.47c) 11:31:29:562 CUserProfile::GetRefCountAndFlags:
>>>>> Ref
>>>>> count
>>>>> is 0, state is 00000100
>>>>> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock
>>>>> <S-1-5-21-3941269898-4162109257-75492585-500>
>>>>> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock: Lock
>>>>> released
>>>>> USERENV(478.47c) 11:31:29:562 CHashTable::HashDelete:
>>>>> S-1-5-21-3941269898-4162109257-75492585-500 deleted
>>>>> USERENV(478.47c) 11:31:29:578 CSyncManager::LeaveLock: Lock
>>>>> deleted
>>>>> USERENV(478.47c) 11:31:29:578 CUserProfile::CleanupUserProfile:
>>>>> Leave
>>>>> critical section
>>>>> USERENV(478.47c) 11:31:29:578 CUserProfile::Initialize:
>>>>> Proccessing
>>>>> S-1-5-21-3941269898-4162109257-75492585-1003
>>>>> USERENV(478.47c) 11:31:29:578 CSyncManager::EnterLock
>>>>> <S-1-5-21-3941269898-4162109257-75492585-1003>
>>>>> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: No existing
>>>>> entry found
>>>>> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: New entry
>>>>> created
>>>>> USERENV(478.47c) 11:31:29:593 CHashTable::HashAdd:
>>>>> S-1-5-21-3941269898-4162109257-75492585-1003 added in bucket 3
>>>>> USERENV(478.47c) 11:31:29:593 CUserProfile::CleanupUserProfile:
>>>>> Enter
>>>>> critical section.
>>>>> USERENV(478.47c) 11:31:29:593 CUserProfile::GetRefCountAndFlags:
>>>>> Ref
>>>>> count
>>>>> is 0, state is 00000100
>>>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock
>>>>> <S-1-5-21-3941269898-4162109257-75492585-1003>
>>>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock
>>>>> released
>>>>> USERENV(478.47c) 11:31:29:609 CHashTable::HashDelete:
>>>>> S-1-5-21-3941269898-4162109257-75492585-1003 deleted
>>>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock
>>>>> deleted
>>>>> USERENV(478.47c) 11:31:29:625 CUserProfile::CleanupUserProfile:
>>>>> Leave
>>>>> critical section
>>>>> USERENV(478.47c) 11:31:29:625 CUserProfile::Initialize:
>>>>> Proccessing
>>>>> S-1-5-21-1957844674-164910922-1384523041-6808
>>>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock
>>>>> <S-1-5-21-1957844674-164910922-1384523041-6808>
>>>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: No existing
>>>>> entry found
>>>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: New entry
>>>>> created
>>>>> USERENV(478.47c) 11:31:29:640 CHashTable::HashAdd:
>>>>> S-1-5-21-1957844674-164910922-1384523041-6808 added in bucket 2
>>>>> USERENV(478.47c) 11:31:29:640 CUserProfile::CleanupUserProfile:
>>>>> Enter
>>>>> critical section.
>>>>> USERENV(478.47c) 11:31:29:640 CUserProfile::GetRefCountAndFlags:
>>>>> Ref
>>>>> count
>>>>> is 0, state is 00000100
>>>>> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock
>>>>> <S-1-5-21-1957844674-164910922-1384523041-6808>
>>>>> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock: Lock
>>>>> released
>>>>> I am very Frustrated now and dont know what to do.
>>>>> Can somebody help me in this please.
>>>> .
>>>>

"Jaywant" <> wrote in message
news:4AA84123-BABA-41BD-AEE1-...
> Hi Meinolf,
>
>
>
> User is member of two Universal - Security Group and four Global -
> Security
> group.
>
>

What type of VPN is it? Is it a client VPN (as in they are home and using a
VPN to connect), or is it a site to site tunnel VPN and the clients are in
another location?

If it's a tunnel, and they are in a different location, do you have AD Sites
setup, and is there a DC that has been configured as a GC at the other
location?

Give us some detail, please, to better figure this out. Also an ipconfig
/all from the DC and from the suspected client machine would be helpful.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

Hi Paul,

This issue appears for only one user however there are some 30 users at the
site for whom these groups are working fine.

I hav DFL as Windows 2000 native
and FFL as Windows 2000.

120 remote sites connected with VPN. Each site have its DC and DNS acting as
GC.








--
Jaywant Kamble.



"Paul Bergson [MVP-DS]" wrote:

> I would agree with you Meinolf, but I would wonder why the user wouldn't
> have access to a GC? Jaywant can you describe your environment? DC's, DNS
> server's and GC's. Topology (Sites).
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:. com...
> > Hello Jaywant,
> >
> > See here about group scopes and if it doesn't apply don't use the
> > universal groups. Then check again with the logon.
> > http://technet.microsoft.com/en-us/l...92(WS.10).aspx
> >
> > Best regards
> >
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and
> > confers no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >
> >> Hi Meinolf,
> >>
> >> User is member of two Universal - Security Group and four Global -
> >> Security group.
> >>
> >> "Meinolf Weber [MVP-DS]" wrote:
> >>
> >>> Hello Jaywant,
> >>>
> >>> Any chance that the user is member of an Universal Group? This kind
> >>> of group requires contact to a Global catalog server for logon.
> >>>
> >>> Best regards
> >>>
> >>> Meinolf Weber
> >>> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >>> confers
> >>> no rights.
> >>> ** Please do NOT email, only reply to Newsgroups
> >>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>>> Hi there,
> >>>>
> >>>> I am having an issue with user account/group membership.
> >>>>
> >>>> I have a remote site where 30-40 users work via VPN/Firewall.
> >>>>
> >>>> All users login to the domain normally but for a single user it take
> >>>> more
> >>>> than 15 mnutes. Also user cant access any share. It happens with
> >>>> this
> >>>> user
> >>>> only. There are number of group for which user is member of, however
> >>>> I
> >>>> have
> >>>> observed that when I add any of four groups say
> >>>> ab_all
> >>>> cd_all
> >>>> ef_all and gh_all. Issue starts.
> >>>> If I remove these groups from user's member of list, it starts
> >>>> working
> >>>> normally.
> >>>> Steps I performed for troublehsooting this.
> >>>>
> >>>> 1. I have created new user account with user's name by renaming his
> >>>> old
> >>>> account.
> >>>> 2. Asked user to login from some diffrent system from the same site.
> >>>> 3. Checked with some other user to login from his system, other
> >>>> users
> >>>> login
> >>>> normally but this user cant.
> >>>> 4. I have enabled userenv.log for debugging. Found log as below.
> >>>> Userenv.log say as.
> >>>> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: critical
> >>>> section
> >>>> initialized
> >>>> USERENV(478.47c) 11:31:29:531 CSyncManager::Initialize: critical
> >>>> section
> >>>> initialized
> >>>> USERENV(478.47c) 11:31:29:531 CUserProfile::Initialize: registry key
> >>>> Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
> >>>> USERENV(478.47c) 11:31:29:546 CUserProfile::Initialize: Proccessing
> >>>> S-1-5-21-3941269898-4162109257-75492585-500
> >>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock
> >>>> <S-1-5-21-3941269898-4162109257-75492585-500>
> >>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: No existing
> >>>> entry found
> >>>> USERENV(478.47c) 11:31:29:546 CSyncManager::EnterLock: New entry
> >>>> created
> >>>> USERENV(478.47c) 11:31:29:546 CHashTable::HashAdd:
> >>>> S-1-5-21-3941269898-4162109257-75492585-500 added in bucket 2
> >>>> USERENV(478.47c) 11:31:29:562 CUserProfile::CleanupUserProfile:
> >>>> Enter
> >>>> critical section.
> >>>> USERENV(478.47c) 11:31:29:562 CUserProfile::GetRefCountAndFlags: Ref
> >>>> count
> >>>> is 0, state is 00000100
> >>>> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock
> >>>> <S-1-5-21-3941269898-4162109257-75492585-500>
> >>>> USERENV(478.47c) 11:31:29:562 CSyncManager::LeaveLock: Lock released
> >>>> USERENV(478.47c) 11:31:29:562 CHashTable::HashDelete:
> >>>> S-1-5-21-3941269898-4162109257-75492585-500 deleted
> >>>> USERENV(478.47c) 11:31:29:578 CSyncManager::LeaveLock: Lock deleted
> >>>> USERENV(478.47c) 11:31:29:578 CUserProfile::CleanupUserProfile:
> >>>> Leave
> >>>> critical section
> >>>> USERENV(478.47c) 11:31:29:578 CUserProfile::Initialize: Proccessing
> >>>> S-1-5-21-3941269898-4162109257-75492585-1003
> >>>> USERENV(478.47c) 11:31:29:578 CSyncManager::EnterLock
> >>>> <S-1-5-21-3941269898-4162109257-75492585-1003>
> >>>> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: No existing
> >>>> entry found
> >>>> USERENV(478.47c) 11:31:29:593 CSyncManager::EnterLock: New entry
> >>>> created
> >>>> USERENV(478.47c) 11:31:29:593 CHashTable::HashAdd:
> >>>> S-1-5-21-3941269898-4162109257-75492585-1003 added in bucket 3
> >>>> USERENV(478.47c) 11:31:29:593 CUserProfile::CleanupUserProfile:
> >>>> Enter
> >>>> critical section.
> >>>> USERENV(478.47c) 11:31:29:593 CUserProfile::GetRefCountAndFlags: Ref
> >>>> count
> >>>> is 0, state is 00000100
> >>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock
> >>>> <S-1-5-21-3941269898-4162109257-75492585-1003>
> >>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock released
> >>>> USERENV(478.47c) 11:31:29:609 CHashTable::HashDelete:
> >>>> S-1-5-21-3941269898-4162109257-75492585-1003 deleted
> >>>> USERENV(478.47c) 11:31:29:609 CSyncManager::LeaveLock: Lock deleted
> >>>> USERENV(478.47c) 11:31:29:625 CUserProfile::CleanupUserProfile:
> >>>> Leave
> >>>> critical section
> >>>> USERENV(478.47c) 11:31:29:625 CUserProfile::Initialize: Proccessing
> >>>> S-1-5-21-1957844674-164910922-1384523041-6808
> >>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock
> >>>> <S-1-5-21-1957844674-164910922-1384523041-6808>
> >>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: No existing
> >>>> entry found
> >>>> USERENV(478.47c) 11:31:29:625 CSyncManager::EnterLock: New entry
> >>>> created
> >>>> USERENV(478.47c) 11:31:29:640 CHashTable::HashAdd:
> >>>> S-1-5-21-1957844674-164910922-1384523041-6808 added in bucket 2
> >>>> USERENV(478.47c) 11:31:29:640 CUserProfile::CleanupUserProfile:
> >>>> Enter
> >>>> critical section.
> >>>> USERENV(478.47c) 11:31:29:640 CUserProfile::GetRefCountAndFlags: Ref
> >>>> count
> >>>> is 0, state is 00000100
> >>>> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock
> >>>> <S-1-5-21-1957844674-164910922-1384523041-6808>
> >>>> USERENV(478.47c) 11:31:29:640 CSyncManager::LeaveLock: Lock released
> >>>> I am very Frustrated now and dont know what to do.
> >>>> Can somebody help me in this please.
> >>>>
> >>> .
> >>>
> >
> >
>
>
> .
>