Unbearable Login Delays for SBS 2008

Discussion in 'Windows Small Business Server' started by dsfseattle, Aug 13, 2009.

  1. dsfseattle

    dsfseattle Guest

    I have a clean SBS 2008 install. By clean I mean I did not upgrade from SBS
    2003. Clients are XP Pro. Some are new clients, some are clients removed
    from the old SBS 2003 domain. For those clients that were removed from the
    old domain I cleaned off all of the old profiles, removed offline files, and
    cleared the cache.

    All clients were updated with all OS critical patches, cleandisk, and
    defrag.

    I do think that the issue I am having is a firewall issue. Also, the thread
    SBS 2008 Group Policies not applied dated 6/25/2008 seems to be a similar
    problem.

    Some symptoms include:
    - very slow login, if network plug is pulled login will come up.
    - some computers can not see network or get access to shared resources.
    - I've surveyed some clients and they do have the same or dns errors in the
    logs
    - All clients were connected using http://connect

    Here is a sample ipconfig of a client:

    Windows IP Configuration

    Host Name . . . . . . . . . . . . : CM-EVELYN
    Primary Dns Suffix . . . . . . . : community.local
    Node Type . . . . . . . . . . . . : Broadcast
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : community.local
    community.local

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . : community.local
    Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
    Connecti
    on
    Physical Address. . . . . . . . . : 00-16-76-28-6D-02
    Dhcp Enabled. . . . . . . . . . . : Yes
    Autoconfiguration Enabled . . . . : Yes
    IP Address. . . . . . . . . . . . : 10.2.1.110
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 10.2.1.1
    DHCP Server . . . . . . . . . . . : 10.2.1.50
    DNS Servers . . . . . . . . . . . : 10.2.1.50
    Lease Obtained. . . . . . . . . . : Wednesday, August 12, 2009
    3:04:36 A
    M
    Lease Expires . . . . . . . . . . : Thursday, August 20, 2009
    3:04:36 AM

    These are a sample of the errors I am getting:

    This is the error I get - event id
    1058.

    Event Id -
    Windows cannot access the file gpt.ini for GPO
    cn={16C87130-7949-4AEF-B71C-426A41D750C4},cn=policies,cn=system,DC=co
    mmunity,DC=local. The file must be present at the location
    <\\community.local\SysVol\community.local\Policies\{16C87130-7949-4AE
    F-B71C-426A41D750C4}\gpt.ini>. (Access is denied. ). Group Policy
    processing aborted.

    In general, all computers seem to be getting this error or something like it.

    Any direction appreciated.

    Dave
     
    dsfseattle, Aug 13, 2009
    #1
    1. Advertisements

  2. dsfseattle

    AllenM Guest

    I'm not sure if your issues are the ame as mine but I too suffer sometimes
    from these slow logins. What happens and it is related to WSUS is that when
    I reboot the SBS 2008 server it reboots with no problems. Howener when the
    clients try to login their machines get stuck at (for a very long time)
    :Applying computer Settins" before they finally get to their desktops. What
    I think is happening is SBS 2008 and WSUS is trying to push out any updates
    at once even though my settings are set to HIGH and updates to be pushed
    daily. Can't figure out exactly what is going on but what does work is to
    reboot the server a second time.
     
    AllenM, Aug 13, 2009
    #2
    1. Advertisements

  3. dsfseattle

    dsfseattle Guest

    I can ping to the server from a workstation with issues noted. Same to that
    workstation from the server.

    Server is the dhcp server.

    I'm not sure what to make of the link you provided, how would that relate to
    XP Pro?

     
    dsfseattle, Aug 13, 2009
    #3
  4. dsfseattle

    Hickinator Guest

    Had similar problem and have you cleaned up the WSUS database? From WSUS
    console you can go to options and then click on cleanup database and allow
    the server to do its thing. You may be surprised at the number of outdated
    and unapplicable updates it deletes. I personally also don't allow any
    downloads of drivers which you can uncheck. The number and enormity of
    driver updates that WSUS will download will blow your mind. WSUS needs to be
    studied and properly administered or it will grow and grow and cause issues
    with slow logons and the proper display of the sbs console. WSUS settings
    are finicky so it may take a little playing around with it to fine tune it
    with your server. By the way sbs 2008 has its own forum. I use
    www.sbs2008.com and the proper groups for 2003 and 2008 and their access are
    listed there.

    Hickinator
     
    Hickinator, Aug 13, 2009
    #4
  5. Dave Nickason [SBS MVP], Aug 13, 2009
    #5
  6. dsfseattle

    dsfseattle Guest

    Dave, Ran that at installation and during this round of issues. No problems
    noted. Dave
     
    dsfseattle, Aug 13, 2009
    #6
  7. dsfseattle

    AllenM Guest

    Hickanator thanks for the tip. I'm going to look into that today.
     
    AllenM, Aug 13, 2009
    #7
  8. dsfseattle

    AllenM Guest

    Hickinator,
    I went into the WSUS console and can't find where the "Option" selection is
    and the "click" clean database option is. Can you be a bit more specific? I
    do see quite a few updates that sre sitting there "Unapproved".
     
    AllenM, Aug 13, 2009
    #8
  9. dsfseattle

    Hickinator Guest

    Start, administrative tools, microsoft windows server update services,
    options, server cleanup wizard.

    Hicinator
     
    Hickinator, Aug 14, 2009
    #9
  10. dsfseattle

    Hickinator Guest

    start, administrative tools, microsoft windows server update services (right
    click and run as administrator), options (at the bottom), server cleanup
    wizard. I am not fully confident that the cleanup of the wsus database will
    resolve your slow logins but it may help becuase sbs server interfaces with
    the workstations status for updating to the sbsmonitoring database. I am
    just not sure if this process runs countercurrently with the login to the
    server and its subsequent verification of the user in AD.

    Hickinator
     
    Hickinator, Aug 14, 2009
    #10
  11. dsfseattle

    AllenM Guest

    Thanks Hickinator. I was looking for the "Options" selection in the wrong
    place. Overlooked and didn't see it in the main windows pane.
     
    AllenM, Aug 14, 2009
    #11
  12. dsfseattle

    dsfseattle Guest

    No errors in the event log of note.

    Here is the ipconfig for the server, any help here?

    Microsoft Windows [Version 6.0.6001]
    Copyright (c) 2006 Microsoft Corporation. All rights reserved.
    C:\Users\itsupport>ipconfig /all
    Windows IP Configuration
    Host Name . . . . . . . . . . . . : CHMHASERVER
    Primary Dns Suffix . . . . . . . : community.local
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : community.local
    Ethernet adapter Local Area Connection:
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Broadcom BCM5709C NetXtreme II GigE
    (NDIS
    VBD Client)
    Physical Address. . . . . . . . . : 00-22-19-BF-8E-E6
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    Link-local IPv6 Address . . . . . : fe80::2166:b99c:d9eb:4f07%10(Preferred)
    Link-local IPv6 Address . . . . . : fe80::ac3a:1832:3e57:bdd6%10(Preferred)
    IPv4 Address. . . . . . . . . . . : 10.2.1.50(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 10.2.1.1
    DNS Servers . . . . . . . . . . . : fe80::2166:b99c:d9eb:4f07%10
    10.2.1.50
    NetBIOS over Tcpip. . . . . . . . : Enabled
    Tunnel adapter Local Area Connection* 8:
    Media State . . . . . . . . . . . : Media disconnected
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . :
    isatap.{BF429840-161F-4107-B1C8-B92949BBD
    EA5}
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    C:\Users\itsupport>
     
    dsfseattle, Aug 14, 2009
    #12
  13. dsfseattle

    dsfseattle Guest

    OK, I believe that Symantec is causing the problem with the gpo errors, but
    login time is still pretty poor. I may have to move away from redirected
    folders. It is just killing me and I have not seen anything that helps with
    this. I'm upgrading anti-virus so lets see if that helps performance.

    Any other ideas?

     
    dsfseattle, Aug 17, 2009
    #13
  14. I wouldn't start disabling or reinstalling anything without diagnosing this
    first. At the least, I'd document in writing any changes you make for
    "undo" purposes. I would start by looking through this (unfortunately long)
    list of possible causes for the group policy error you're getting on the
    client PCs.
    http://eventid.net/display.asp?eventid=1058&eventno=1752&source=Userenv&phase=1

    If you go to a running pc and do Start -> Run -> gpupdate /force, do you get
    the same error relating to GP processing, or do you only get them at
    startup?

    Without reading back through the whole thread, I don't see how disabling
    redirection will help with login time. You don't have a group policy set to
    sync offline files on your client PCs at startup, right? It seems to me
    that folder redirection wouldn't cause this, but sync settings might. It
    would be a simple matter to disable offline files on a client PC, then
    reboot to see if the startup time gets better. In that case, I'd re-enable
    offline but change the settings so it doesn't automatically sync at startup.

    What happens if you uninstall or disable symantec on the client PC?


     
    Dave Nickason [SBS MVP], Aug 17, 2009
    #14
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.