Announcement

Collapse
No announcement yet.

Slow Logons - Group Policy Problem

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Slow Logons - Group Policy Problem

    We currently have a big problem with slow logons to our PCs.

    It looks like our Default Users Policy is becoming locked as when we try to edit it using the GP Management console there is a long delay before the policy opens in GPO editor. Also if we try to edit one of our ADM templates we get a message saying:

    "The Group Policy snap in was unable to save your changes due to the following error: The process cannot access the file because it is being used by another process."

    We currently have 5 live domain controllers and the problem seems to be occuring on all of them.

    Has anyone seen anything like this before?

  • #2
    Re: Slow Logons - Group Policy Problem

    What AD version are you using and are you using GPMC directly on a DC and from a client machine? How are your FSMO roles distributed? Is DNS and other services effecting anything? Have you tried rebooting at all?

    Comment


    • #3
      Re: Slow Logons - Group Policy Problem

      All our DC's are running Windows Server 2003 Standard.

      Using GPMC both from server and client has the same issue.

      PDC and Domain role owner are on one DC and RID Pool, Infrastructure and Schema owners are held by another DC.

      DNS is on 2 of our DCs and seems to be working fine as this was one of the first things we checked.

      A couple weeks ago we had this issue but it appeared to be only occuring on only one of our DCs. Rebooting the server seemed to fix the issue at the time, but now the problem is with all of them rebooting has no effect!
      Last edited by cedgingt; 28th May 2009, 15:44.

      Comment


      • #4
        Re: Slow Logons - Group Policy Problem

        Ok so last night we added a registry Key to all our domain controllers and rebooted them -

        Registry subkey: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
        Entry: BufferPolicyReads
        Type: DWORD
        Value: 1

        This morning logons seem to be a lot quicker, especially at remote sites. However we're still none the wiser as to what caused the problems initially!

        Comment


        • #5
          Re: Slow Logons - Group Policy Problem

          Any events logged in the event viewer?
          Are your machines updated? No SP on your servers?
          See if this helps or sheds any more light: http://support.microsoft.com/kb/319440
          Caesar's cipher - 3

          ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

          SFX JNRS FC U6 MNGR

          Comment


          • #6
            Re: Slow Logons - Group Policy Problem

            Well L4ndy, you beat me to the point on this one. I was just going to reference the same KB article.

            Comment


            • #7
              Re: Slow Logons - Group Policy Problem

              Originally posted by joeqwerty View Post
              Well L4ndy, you beat me to the point on this one. I was just going to reference the same KB article.
              All the GoogleS lead to MS KBs
              Caesar's cipher - 3

              ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

              SFX JNRS FC U6 MNGR

              Comment


              • #8
                Re: Slow Logons - Group Policy Problem

                Thanks guys! We too found the same KB article.

                Its seems to be quite vague whether they're talking about applying that change to DCs or Clients...

                Originally posted by L4ndy View Post
                Are your machines updated? No SP on your servers?
                Our clients are XP Sp2 and our Servers are also Sp2.
                Last edited by cedgingt; 29th May 2009, 15:59.

                Comment


                • #9
                  Re: Slow Logons - Group Policy Problem

                  I would advise against the role holding the way it is now. Rather have schema and domain naming on one server. Then infrastructure, rid master and pdc emulator on another.

                  You wouldn't happen to have any of these turned on by accident?

                  http://support.microsoft.com/kb/227369

                  Make sure have no issues by running both DCDiag and NetDiag.

                  Turn on verbose netlogon logging to see what's going on
                  http://support.microsoft.com/kb/109626

                  Do you have any WMI filters?

                  Did you try this?
                  http://www.tweakxp.com/article37007.aspx
                  GoogleFu is strong with this one ^

                  Comment


                  • #10
                    Re: Slow Logons - Group Policy Problem

                    Unfortunatly all of these look ok, and no problems reported by NetDiag or DCDiag.

                    We've had our network in place for a few years and haven't made any recent changes that coinside with our problems! Our Group Polices have essentially been unchanged (appart from firewall and software restriction hashes ect) since we implemented XP 5 years ago.

                    We've started looking at whether Opportunistic Locking could be to blame, but can't understand what's changed for us to suddenly develop a problem with this! The only thing that seems to coincide is MS security patches on our DCs...

                    Comment


                    • #11
                      Re: Slow Logons - Group Policy Problem

                      You could run the group policy diagnostic to see if that shows up anything.
                      (at the bottom of this LINK)

                      If you can build a VM then maybe you could restore your AD (or add then break off) see if the issue remains there and then reset the default domain policy, test and then add in each bit?
                      cheers
                      Andy

                      Please read this before you post:


                      Quis custodiet ipsos custodes?

                      Comment

                      Working...
                      X