Client performance problem windows 2003 server...

Hi

I have a problem with the clients at site B, first I will shortly describe
the situation.

Setup:
A Windows 2000 server was at first installed in site A (both geographically
and in the site configuration) this is acting as the "primary"
domaincontroller.
This server is GC, DDNS, DHCP, WINS, Print and file server.

Then at site B there is a windows 2003 server. This is acting as a GC, DDNS,
WINS, file and print server.

The sites are connected through a VPN tunnel with cisco pix firewalls. The
internetconnection is at site A a dedicated connection and at site B a ADSL
1Mbit connection.

The problem:
When the connection between the two sites is terminated the clients at site
B becomes extreamly slow to logon and even to access the local server at site
B. The clients only have mappings to shares on the server at site B. When I
check the clients uses site Bs server as logonserver. But the group policy
seems to be picked up from site A:s server, So I dont know if that could slow
down the file access to the local server at site B...

Help would grately be appreciated.

Best Regards
Perra

--
________________________
Per-Olof Olsson
IT - Manager

Hello,

Thanks for your post.

I understand you encountered that following issue:
When the connection between the two sites is terminated, the clients at
site B becomes extremely slow to logon and even to access the local server
at site B. If I have misunderstood your concern, please feel free to let
me know.

Based on my experience, this issue may be caused by the DNS. However, the
troubleshooting steps may be complex and time-consuming. Therefore, please
take your time and patience in confirming and trying the following things
so that we can isolate the issue:

1. Does this issue happen on every client in Site B?
2. Have you replicated and synchronized the DNS between Site A and Site B?
3. Verify DNS settings of the clients and Win2k3 Server in Site B. Try to
point the clients' DNS server to the Win2k3 server in Site B. For example,
site A DC's IP is 192.168.0.1, Site B DC's IP is 192.168.1.1, point the
clients' DNS in Site B to 192.168.1.1.

From this step, we can make sure client will contact the local DC for the
logon authentication. Restart the client, does this issue disappear?

4. If the issue persists, I would appreciate you collecting the following
information and send to me at v-(E-Mail Removed) so that we can perform
further research on this issue:

A. Collect the Userenv log on one of the problematic client machines
--------------------------------------
Use Registry Editor to add the following registry value (or modify it, if
the value already exists):
Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon

Value: UserEnvDebugLevel
Value Type: REG_DWORD
Value Data: 10002 (Hexadecimal)

UserEnvDebugLevel can have the following values:

NONE 0x00000000
NORMAL 0x00000001
VERBOSE 0x00000002
LOGFILE 0x00010000
DEBUGGER 0x00020000
The default value is NORMAL|LOGFILE (0x00010001).

Note: To disable logging, select NONE (where the value is 0X00000000).

You can also combine the values. For example, you can combine VERBOSE
0x00000002 and LOGFILE 0x00010000 to get 0x00010002. So if
UserEnvDebugLevel is set with a value of 0x00010002, this turns on both
LOGFILE and VERBOSE. Combining these values is the same as using an OR
statement:

0x00010000 OR 0x00000002 = 0x00010002

The log file is written to the %Systemroot%\Debug\UserMode\Userenv.log
file. If the Userenv.log exists and is greater than 300 KB, the existing
file will be renamed to Userenv.bak, and a new log file created.

For more information please refer to the following Microsoft Knowledge Base
article.

Q221833: How to Enable User Environment Event Logging
http://support.microsoft.com/default...B;EN-US;221833

B. Collect Network MPS Report on both Win2k3 Server in Site B and one of
the problematic client machines.
------------------------------------
a. Visit
http://download.microsoft.com/downlo...5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE. to download the file.
b. Run the MPSRPT_NETWORK.EXE
c. Wait for 10~15 minutes.
d. Open Windows explorer, navigate to
%SYSTEMROOT%\MPSReports\Network\Reports\cab\
e. Send the .cab file directly to me.

HTH! Any update, please keep in touch!

Thanks & Regards

Amanda Wang [MSFT]

Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

================================================== ==================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===================

--------------------
>Thread-Topic: Client performance problem windows 2003 server...
>thread-index: AcVh1EE5heolLUKdSZGwhLy1iPEGRA==
>X-WBNR-Posting-Host: 194.132.162.3
>From: "=?Utf-8?B?ZmM5YTlmODItMjEyOTY5Mjg1MEBuZXdzLnBvc3RhbGlhcw ==?="
<fc9a9f82-(E-Mail Removed)>
>Subject: Client performance problem windows 2003 server...
>Date: Thu, 26 May 2005 02:21:10 -0700
>Lines: 35
>Message-ID: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.networking
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.networking:15995
>X-Tomcat-NG: microsoft.public.windows.server.networking
>
>Hi
>
>I have a problem with the clients at site B, first I will shortly describe
>the situation.
>
>Setup:
>A Windows 2000 server was at first installed in site A (both
geographically
>and in the site configuration) this is acting as the "primary"
>domaincontroller.
>This server is GC, DDNS, DHCP, WINS, Print and file server.
>
>Then at site B there is a windows 2003 server. This is acting as a GC,
DDNS,
>WINS, file and print server.
>
>The sites are connected through a VPN tunnel with cisco pix firewalls. The
>internetconnection is at site A a dedicated connection and at site B a
ADSL
>1Mbit connection.
>
>The problem:
>When the connection between the two sites is terminated the clients at
site
>B becomes extreamly slow to logon and even to access the local server at
site
>B. The clients only have mappings to shares on the server at site B. When
I
>check the clients uses site Bs server as logonserver. But the group policy
>seems to be picked up from site A:s server, So I dont know if that could
slow
>down the file access to the local server at site B...
>
>Help would grately be appreciated.
>
>Best Regards
>Perra
>
>--
>________________________
>Per-Olof Olsson
>IT - Manager
>

Hello,

I am just writing in to see if you have had an opportunity to try the
troubleshooting steps or collect the information. If you have anything
unclear with the previous information I've provide to you, please don't
hesitate to let me know.

I appreciate your time and I look forward to hearing from you.

Thanks & Regards

Amanda Wang [MSFT]

Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

================================================== ==================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===================

--------------------
>X-Tomcat-ID: 172217849
>References: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>MIME-Version: 1.0
>Content-Type: text/plain
>Content-Transfer-Encoding: 7bit
>From: v-(E-Mail Removed) (Amanda Wang [MSFT])
>Organization: Microsoft
>Date: Fri, 27 May 2005 09:54:19 GMT
>Subject: RE: Client performance problem windows 2003 server...
>X-Tomcat-NG: microsoft.public.windows.server.networking
>Message-ID: <(E-Mail Removed)>
>Newsgroups: microsoft.public.windows.server.networking
>Lines: 150
>Path: TK2MSFTNGXA01.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.networking:16022
>NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
>
>Hello,
>
>Thanks for your post.
>
>I understand you encountered that following issue:
>When the connection between the two sites is terminated, the clients at
>site B becomes extremely slow to logon and even to access the local server
>at site B. If I have misunderstood your concern, please feel free to let
>me know.
>
>Based on my experience, this issue may be caused by the DNS. However, the
>troubleshooting steps may be complex and time-consuming. Therefore,
please
>take your time and patience in confirming and trying the following things
>so that we can isolate the issue:
>
>1. Does this issue happen on every client in Site B?
>2. Have you replicated and synchronized the DNS between Site A and Site B?
>3. Verify DNS settings of the clients and Win2k3 Server in Site B. Try to
>point the clients' DNS server to the Win2k3 server in Site B. For
example,
>site A DC's IP is 192.168.0.1, Site B DC's IP is 192.168.1.1, point the
>clients' DNS in Site B to 192.168.1.1.
>
>From this step, we can make sure client will contact the local DC for the
>logon authentication. Restart the client, does this issue disappear?
>
>4. If the issue persists, I would appreciate you collecting the following
>information and send to me at v-(E-Mail Removed) so that we can
perform
>further research on this issue:
>
>A. Collect the Userenv log on one of the problematic client machines
>--------------------------------------
>Use Registry Editor to add the following registry value (or modify it, if
>the value already exists):
>Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
>NT\CurrentVersion\Winlogon
>
>Value: UserEnvDebugLevel
>Value Type: REG_DWORD
>Value Data: 10002 (Hexadecimal)
>
>UserEnvDebugLevel can have the following values:
>
>NONE 0x00000000
>NORMAL 0x00000001
>VERBOSE 0x00000002
>LOGFILE 0x00010000
>DEBUGGER 0x00020000
>The default value is NORMAL|LOGFILE (0x00010001).
>
>Note: To disable logging, select NONE (where the value is 0X00000000).
>
>You can also combine the values. For example, you can combine VERBOSE
>0x00000002 and LOGFILE 0x00010000 to get 0x00010002. So if
>UserEnvDebugLevel is set with a value of 0x00010002, this turns on both
>LOGFILE and VERBOSE. Combining these values is the same as using an OR
>statement:
>
>0x00010000 OR 0x00000002 = 0x00010002
>
>The log file is written to the %Systemroot%\Debug\UserMode\Userenv.log
>file. If the Userenv.log exists and is greater than 300 KB, the existing
>file will be renamed to Userenv.bak, and a new log file created.
>
>For more information please refer to the following Microsoft Knowledge
Base
>article.
>
>Q221833: How to Enable User Environment Event Logging
>http://support.microsoft.com/default...B;EN-US;221833
>
>B. Collect Network MPS Report on both Win2k3 Server in Site B and one of
>the problematic client machines.
>------------------------------------
>a. Visit
>http://download.microsoft.com/downlo...e5-a579-30b0bd
9
>15706/MPSRPT_NETWORK.EXE. to download the file.
>b. Run the MPSRPT_NETWORK.EXE
>c. Wait for 10~15 minutes.
>d. Open Windows explorer, navigate to
>%SYSTEMROOT%\MPSReports\Network\Reports\cab\
>e. Send the .cab file directly to me.
>
>HTH! Any update, please keep in touch!
>
>Thanks & Regards
>
>Amanda Wang [MSFT]
>
>Microsoft Online Partner Support
>
>Get Secure! - www.microsoft.com/security
>
>================================================= ===================
>
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
>
>================================================= ====================
>
>--------------------
>>Thread-Topic: Client performance problem windows 2003 server...
>>thread-index: AcVh1EE5heolLUKdSZGwhLy1iPEGRA==
>>X-WBNR-Posting-Host: 194.132.162.3
>>From: "=?Utf-8?B?ZmM5YTlmODItMjEyOTY5Mjg1MEBuZXdzLnBvc3RhbGlhcw ==?="
><fc9a9f82-(E-Mail Removed)>
>>Subject: Client performance problem windows 2003 server...
>>Date: Thu, 26 May 2005 02:21:10 -0700
>>Lines: 35
>>Message-ID: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>>MIME-Version: 1.0
>>Content-Type: text/plain;
>> charset="Utf-8"
>>Content-Transfer-Encoding: 7bit
>>X-Newsreader: Microsoft CDO for Windows 2000
>>Content-Class: urn:content-classes:message
>>Importance: normal
>>Priority: normal
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>Newsgroups: microsoft.public.windows.server.networking
>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl
>microsoft.public.windows.server.networking:1599 5
>>X-Tomcat-NG: microsoft.public.windows.server.networking
>>
>>Hi
>>
>>I have a problem with the clients at site B, first I will shortly
describe
>>the situation.
>>
>>Setup:
>>A Windows 2000 server was at first installed in site A (both
>geographically
>>and in the site configuration) this is acting as the "primary"
>>domaincontroller.
>>This server is GC, DDNS, DHCP, WINS, Print and file server.
>>
>>Then at site B there is a windows 2003 server. This is acting as a GC,
>DDNS,
>>WINS, file and print server.
>>
>>The sites are connected through a VPN tunnel with cisco pix firewalls.
The
>>internetconnection is at site A a dedicated connection and at site B a
>ADSL
>>1Mbit connection.
>>
>>The problem:
>>When the connection between the two sites is terminated the clients at
>site
>>B becomes extreamly slow to logon and even to access the local server at
>site
>>B. The clients only have mappings to shares on the server at site B. When
>I
>>check the clients uses site Bs server as logonserver. But the group
policy
>>seems to be picked up from site A:s server, So I dont know if that could
>slow
>>down the file access to the local server at site B...
>>
>>Help would grately be appreciated.
>>
>>Best Regards
>>Perra
>>
>>--
>>________________________
>>Per-Olof Olsson
>>IT - Manager
>>
>
>

Hi Amanda

Sorry for the late answer, I am going to the customer tomorrow June 1st.
What I have for you now is the following answers:
1. Yes every client is suffering from this
2. The DNS is replicated throught sites and services
3. The DNS settings on site B is distributed the following way to the
clients: (the DHCP scope settings)
Primary dns: site Bs win2k3 server
secondary dns: site As win2k server
same setup for wins...

It shouldnt matter if i have the server at site A as a secondary DNS server
for the clients as long as the site B (primary DNS server) is available
right?
I will collect and mail u step 4. tomorrow at the site, hopefully you if you
are online you could have a peak to my posting there and give me an aswer as
I will be at the site during the day. That post should be here around 1200
hours swedish time if you have that possibility....

Kind Regards
Perra

"Amanda Wang [MSFT]" <v-(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hello,
>
> I am just writing in to see if you have had an opportunity to try the
> troubleshooting steps or collect the information. If you have anything
> unclear with the previous information I've provide to you, please don't
> hesitate to let me know.
>
> I appreciate your time and I look forward to hearing from you.
>
> Thanks & Regards
>
> Amanda Wang [MSFT]
>
> Microsoft Online Partner Support
>
> Get Secure! - www.microsoft.com/security
>
> ================================================== ==================
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> ================================================== ===================
>
> --------------------
>>X-Tomcat-ID: 172217849
>>References: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>>MIME-Version: 1.0
>>Content-Type: text/plain
>>Content-Transfer-Encoding: 7bit
>>From: v-(E-Mail Removed) (Amanda Wang [MSFT])
>>Organization: Microsoft
>>Date: Fri, 27 May 2005 09:54:19 GMT
>>Subject: RE: Client performance problem windows 2003 server...
>>X-Tomcat-NG: microsoft.public.windows.server.networking
>>Message-ID: <(E-Mail Removed)>
>>Newsgroups: microsoft.public.windows.server.networking
>>Lines: 150
>>Path: TK2MSFTNGXA01.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windows.server.networking:16022
>>NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
>>
>>Hello,
>>
>>Thanks for your post.
>>
>>I understand you encountered that following issue:
>>When the connection between the two sites is terminated, the clients at
>>site B becomes extremely slow to logon and even to access the local server
>>at site B. If I have misunderstood your concern, please feel free to let
>>me know.
>>
>>Based on my experience, this issue may be caused by the DNS. However, the
>>troubleshooting steps may be complex and time-consuming. Therefore,
> please
>>take your time and patience in confirming and trying the following things
>>so that we can isolate the issue:
>>
>>1. Does this issue happen on every client in Site B?
>>2. Have you replicated and synchronized the DNS between Site A and Site B?
>>3. Verify DNS settings of the clients and Win2k3 Server in Site B. Try to
>>point the clients' DNS server to the Win2k3 server in Site B. For
> example,
>>site A DC's IP is 192.168.0.1, Site B DC's IP is 192.168.1.1, point the
>>clients' DNS in Site B to 192.168.1.1.
>>
>>From this step, we can make sure client will contact the local DC for the
>>logon authentication. Restart the client, does this issue disappear?
>>
>>4. If the issue persists, I would appreciate you collecting the following
>>information and send to me at v-(E-Mail Removed) so that we can
> perform
>>further research on this issue:
>>
>>A. Collect the Userenv log on one of the problematic client machines
>>--------------------------------------
>>Use Registry Editor to add the following registry value (or modify it, if
>>the value already exists):
>>Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
>>NT\CurrentVersion\Winlogon
>>
>>Value: UserEnvDebugLevel
>>Value Type: REG_DWORD
>>Value Data: 10002 (Hexadecimal)
>>
>>UserEnvDebugLevel can have the following values:
>>
>>NONE 0x00000000
>>NORMAL 0x00000001
>>VERBOSE 0x00000002
>>LOGFILE 0x00010000
>>DEBUGGER 0x00020000
>>The default value is NORMAL|LOGFILE (0x00010001).
>>
>>Note: To disable logging, select NONE (where the value is 0X00000000).
>>
>>You can also combine the values. For example, you can combine VERBOSE
>>0x00000002 and LOGFILE 0x00010000 to get 0x00010002. So if
>>UserEnvDebugLevel is set with a value of 0x00010002, this turns on both
>>LOGFILE and VERBOSE. Combining these values is the same as using an OR
>>statement:
>>
>>0x00010000 OR 0x00000002 = 0x00010002
>>
>>The log file is written to the %Systemroot%\Debug\UserMode\Userenv.log
>>file. If the Userenv.log exists and is greater than 300 KB, the existing
>>file will be renamed to Userenv.bak, and a new log file created.
>>
>>For more information please refer to the following Microsoft Knowledge
> Base
>>article.
>>
>>Q221833: How to Enable User Environment Event Logging
>>http://support.microsoft.com/default...B;EN-US;221833
>>
>>B. Collect Network MPS Report on both Win2k3 Server in Site B and one of
>>the problematic client machines.
>>------------------------------------
>>a. Visit
>>http://download.microsoft.com/downlo...e5-a579-30b0bd
> 9
>>15706/MPSRPT_NETWORK.EXE. to download the file.
>>b. Run the MPSRPT_NETWORK.EXE
>>c. Wait for 10~15 minutes.
>>d. Open Windows explorer, navigate to
>>%SYSTEMROOT%\MPSReports\Network\Reports\cab\
>>e. Send the .cab file directly to me.
>>
>>HTH! Any update, please keep in touch!
>>
>>Thanks & Regards
>>
>>Amanda Wang [MSFT]
>>
>>Microsoft Online Partner Support
>>
>>Get Secure! - www.microsoft.com/security
>>
>>================================================ ====================
>>
>>When responding to posts, please "Reply to Group" via your newsreader so
>>that others may learn and benefit from your issue.
>>
>>================================================ =====================
>>
>>--------------------
>>>Thread-Topic: Client performance problem windows 2003 server...
>>>thread-index: AcVh1EE5heolLUKdSZGwhLy1iPEGRA==
>>>X-WBNR-Posting-Host: 194.132.162.3
>>>From: "=?Utf-8?B?ZmM5YTlmODItMjEyOTY5Mjg1MEBuZXdzLnBvc3RhbGlhcw ==?="
>><fc9a9f82-(E-Mail Removed)>
>>>Subject: Client performance problem windows 2003 server...
>>>Date: Thu, 26 May 2005 02:21:10 -0700
>>>Lines: 35
>>>Message-ID: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>>>MIME-Version: 1.0
>>>Content-Type: text/plain;
>>> charset="Utf-8"
>>>Content-Transfer-Encoding: 7bit
>>>X-Newsreader: Microsoft CDO for Windows 2000
>>>Content-Class: urn:content-classes:message
>>>Importance: normal
>>>Priority: normal
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>>Newsgroups: microsoft.public.windows.server.networking
>>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
>>microsoft.public.windows.server.networking:159 95
>>>X-Tomcat-NG: microsoft.public.windows.server.networking
>>>
>>>Hi
>>>
>>>I have a problem with the clients at site B, first I will shortly
> describe
>>>the situation.
>>>
>>>Setup:
>>>A Windows 2000 server was at first installed in site A (both
>>geographically
>>>and in the site configuration) this is acting as the "primary"
>>>domaincontroller.
>>>This server is GC, DDNS, DHCP, WINS, Print and file server.
>>>
>>>Then at site B there is a windows 2003 server. This is acting as a GC,
>>DDNS,
>>>WINS, file and print server.
>>>
>>>The sites are connected through a VPN tunnel with cisco pix firewalls.
> The
>>>internetconnection is at site A a dedicated connection and at site B a
>>ADSL
>>>1Mbit connection.
>>>
>>>The problem:
>>>When the connection between the two sites is terminated the clients at
>>site
>>>B becomes extreamly slow to logon and even to access the local server at
>>site
>>>B. The clients only have mappings to shares on the server at site B. When
>>I
>>>check the clients uses site Bs server as logonserver. But the group
> policy
>>>seems to be picked up from site A:s server, So I dont know if that could
>>slow
>>>down the file access to the local server at site B...
>>>
>>>Help would grately be appreciated.
>>>
>>>Best Regards
>>>Perra
>>>
>>>--
>>>________________________
>>>Per-Olof Olsson
>>>IT - Manager
>>>
>>
>>
>

Hi

I have now collected the information you wanted and they are sent to you by
mail now.
The client machine didnt write anything today in the userenv file, the last
time was 24/5 2005.

Best regards
Per-Olof Olsson

<fc9a9f82-(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi Amanda
>
> Sorry for the late answer, I am going to the customer tomorrow June 1st.
> What I have for you now is the following answers:
> 1. Yes every client is suffering from this
> 2. The DNS is replicated throught sites and services
> 3. The DNS settings on site B is distributed the following way to the
> clients: (the DHCP scope settings)
> Primary dns: site Bs win2k3 server
> secondary dns: site As win2k server
> same setup for wins...
>
> It shouldnt matter if i have the server at site A as a secondary DNS
> server for the clients as long as the site B (primary DNS server) is
> available right?
> I will collect and mail u step 4. tomorrow at the site, hopefully you if
> you are online you could have a peak to my posting there and give me an
> aswer as I will be at the site during the day. That post should be here
> around 1200 hours swedish time if you have that possibility....
>
> Kind Regards
> Perra
>
> "Amanda Wang [MSFT]" <v-(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Hello,
>>
>> I am just writing in to see if you have had an opportunity to try the
>> troubleshooting steps or collect the information. If you have anything
>> unclear with the previous information I've provide to you, please don't
>> hesitate to let me know.
>>
>> I appreciate your time and I look forward to hearing from you.
>>
>> Thanks & Regards
>>
>> Amanda Wang [MSFT]
>>
>> Microsoft Online Partner Support
>>
>> Get Secure! - www.microsoft.com/security
>>
>> ================================================== ==================
>>
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>>
>> ================================================== ===================
>>
>> --------------------
>>>X-Tomcat-ID: 172217849
>>>References: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>>>MIME-Version: 1.0
>>>Content-Type: text/plain
>>>Content-Transfer-Encoding: 7bit
>>>From: v-(E-Mail Removed) (Amanda Wang [MSFT])
>>>Organization: Microsoft
>>>Date: Fri, 27 May 2005 09:54:19 GMT
>>>Subject: RE: Client performance problem windows 2003 server...
>>>X-Tomcat-NG: microsoft.public.windows.server.networking
>>>Message-ID: <(E-Mail Removed)>
>>>Newsgroups: microsoft.public.windows.server.networking
>>>Lines: 150
>>>Path: TK2MSFTNGXA01.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
>> microsoft.public.windows.server.networking:16022
>>>NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
>>>
>>>Hello,
>>>
>>>Thanks for your post.
>>>
>>>I understand you encountered that following issue:
>>>When the connection between the two sites is terminated, the clients at
>>>site B becomes extremely slow to logon and even to access the local
>>>server
>>>at site B. If I have misunderstood your concern, please feel free to let
>>>me know.
>>>
>>>Based on my experience, this issue may be caused by the DNS. However,
>>>the
>>>troubleshooting steps may be complex and time-consuming. Therefore,
>> please
>>>take your time and patience in confirming and trying the following things
>>>so that we can isolate the issue:
>>>
>>>1. Does this issue happen on every client in Site B?
>>>2. Have you replicated and synchronized the DNS between Site A and Site
>>>B?
>>>3. Verify DNS settings of the clients and Win2k3 Server in Site B. Try
>>>to
>>>point the clients' DNS server to the Win2k3 server in Site B. For
>> example,
>>>site A DC's IP is 192.168.0.1, Site B DC's IP is 192.168.1.1, point the
>>>clients' DNS in Site B to 192.168.1.1.
>>>
>>>From this step, we can make sure client will contact the local DC for the
>>>logon authentication. Restart the client, does this issue disappear?
>>>
>>>4. If the issue persists, I would appreciate you collecting the following
>>>information and send to me at v-(E-Mail Removed) so that we can
>> perform
>>>further research on this issue:
>>>
>>>A. Collect the Userenv log on one of the problematic client machines
>>>--------------------------------------
>>>Use Registry Editor to add the following registry value (or modify it, if
>>>the value already exists):
>>>Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
>>>NT\CurrentVersion\Winlogon
>>>
>>>Value: UserEnvDebugLevel
>>>Value Type: REG_DWORD
>>>Value Data: 10002 (Hexadecimal)
>>>
>>>UserEnvDebugLevel can have the following values:
>>>
>>>NONE 0x00000000
>>>NORMAL 0x00000001
>>>VERBOSE 0x00000002
>>>LOGFILE 0x00010000
>>>DEBUGGER 0x00020000
>>>The default value is NORMAL|LOGFILE (0x00010001).
>>>
>>>Note: To disable logging, select NONE (where the value is 0X00000000).
>>>
>>>You can also combine the values. For example, you can combine VERBOSE
>>>0x00000002 and LOGFILE 0x00010000 to get 0x00010002. So if
>>>UserEnvDebugLevel is set with a value of 0x00010002, this turns on both
>>>LOGFILE and VERBOSE. Combining these values is the same as using an OR
>>>statement:
>>>
>>>0x00010000 OR 0x00000002 = 0x00010002
>>>
>>>The log file is written to the %Systemroot%\Debug\UserMode\Userenv.log
>>>file. If the Userenv.log exists and is greater than 300 KB, the existing
>>>file will be renamed to Userenv.bak, and a new log file created.
>>>
>>>For more information please refer to the following Microsoft Knowledge
>> Base
>>>article.
>>>
>>>Q221833: How to Enable User Environment Event Logging
>>>http://support.microsoft.com/default...B;EN-US;221833
>>>
>>>B. Collect Network MPS Report on both Win2k3 Server in Site B and one of
>>>the problematic client machines.
>>>------------------------------------
>>>a. Visit
>>>http://download.microsoft.com/downlo...e5-a579-30b0bd
>> 9
>>>15706/MPSRPT_NETWORK.EXE. to download the file.
>>>b. Run the MPSRPT_NETWORK.EXE
>>>c. Wait for 10~15 minutes.
>>>d. Open Windows explorer, navigate to
>>>%SYSTEMROOT%\MPSReports\Network\Reports\cab\
>>>e. Send the .cab file directly to me.
>>>
>>>HTH! Any update, please keep in touch!
>>>
>>>Thanks & Regards
>>>
>>>Amanda Wang [MSFT]
>>>
>>>Microsoft Online Partner Support
>>>
>>>Get Secure! - www.microsoft.com/security
>>>
>>>=============================================== =====================
>>>
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>
>>>=============================================== ======================
>>>
>>>--------------------
>>>>Thread-Topic: Client performance problem windows 2003 server...
>>>>thread-index: AcVh1EE5heolLUKdSZGwhLy1iPEGRA==
>>>>X-WBNR-Posting-Host: 194.132.162.3
>>>>From: "=?Utf-8?B?ZmM5YTlmODItMjEyOTY5Mjg1MEBuZXdzLnBvc3RhbGlhcw ==?="
>>><fc9a9f82-(E-Mail Removed)>
>>>>Subject: Client performance problem windows 2003 server...
>>>>Date: Thu, 26 May 2005 02:21:10 -0700
>>>>Lines: 35
>>>>Message-ID: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>>>>MIME-Version: 1.0
>>>>Content-Type: text/plain;
>>>> charset="Utf-8"
>>>>Content-Transfer-Encoding: 7bit
>>>>X-Newsreader: Microsoft CDO for Windows 2000
>>>>Content-Class: urn:content-classes:message
>>>>Importance: normal
>>>>Priority: normal
>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>>>Newsgroups: microsoft.public.windows.server.networking
>>>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>microsoft.public.windows.server.networking:1599 5
>>>>X-Tomcat-NG: microsoft.public.windows.server.networking
>>>>
>>>>Hi
>>>>
>>>>I have a problem with the clients at site B, first I will shortly
>> describe
>>>>the situation.
>>>>
>>>>Setup:
>>>>A Windows 2000 server was at first installed in site A (both
>>>geographically
>>>>and in the site configuration) this is acting as the "primary"
>>>>domaincontroller.
>>>>This server is GC, DDNS, DHCP, WINS, Print and file server.
>>>>
>>>>Then at site B there is a windows 2003 server. This is acting as a GC,
>>>DDNS,
>>>>WINS, file and print server.
>>>>
>>>>The sites are connected through a VPN tunnel with cisco pix firewalls.
>> The
>>>>internetconnection is at site A a dedicated connection and at site B a
>>>ADSL
>>>>1Mbit connection.
>>>>
>>>>The problem:
>>>>When the connection between the two sites is terminated the clients at
>>>site
>>>>B becomes extreamly slow to logon and even to access the local server at
>>>site
>>>>B. The clients only have mappings to shares on the server at site B.
>>>>When
>>>I
>>>>check the clients uses site Bs server as logonserver. But the group
>> policy
>>>>seems to be picked up from site A:s server, So I dont know if that could
>>>slow
>>>>down the file access to the local server at site B...
>>>>
>>>>Help would grately be appreciated.
>>>>
>>>>Best Regards
>>>>Perra
>>>>
>>>>--
>>>>________________________
>>>>Per-Olof Olsson
>>>>IT - Manager
>>>>
>>>
>>>
>>
>
>

Hi again

Some more info...

The mappings on the clients is mapped like this:
NET USE G: \\smedjan.local\DFSroot\Verktyg_Gemensam /PERSISTENT:NO

If I change it to NET USE G: \\verktyg\Verktyg_Gemensam$ /PERSISTENT:NO

then the problem with slow connections disappears... It seems like the
dfsroot could be some sort of a problem here?!

If I change the group policy setting on the w2k3 server at site B the policy
wont be applied to the clients until the w2k server at site A has that group
policy information. Even if I run GPUPDATE on the clients and server. If I
make a change in the policys on w2k server at site a the clients gets that
policy applied directly with gpupdate...

Kind Regards
Per-Olof Olsson

Hi Perra,

Glad to hear from you.

I noticed that you mentioned that when the connection between the two sites
is terminated, the clients at site B becomes extremely slow to logon and
even to access the local server at site B.

Do you mean only when the connection between two sites is terminated, the
clients in Site B log on very slow?

Meanwhile according to the clients¡¯ DNS and WINS settings in Site B, I
suggest you only set the Primary DNS and WINS to point to Win2k3 server to
see if it works.

Please try it and collect the information I requested in my previous reply
and send to me at v-(E-Mail Removed). Anything update, please keep in
touch.

Thanks & Regards

Amanda Wang [MSFT]

Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

================================================== ==================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===================

--------------------
>From: <fc9a9f82-(E-Mail Removed)>
>References: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
<(E-Mail Removed)>
<(E-Mail Removed)>
<(E-Mail Removed)>
>Subject: Re: Client performance problem windows 2003 server...
>Date: Wed, 1 Jun 2005 11:16:13 +0200
>Lines: 267
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>X-RFC2646: Format=Flowed; Response
>Message-ID: <(E-Mail Removed)>
>Newsgroups: microsoft.public.windows.server.networking
>NNTP-Posting-Host: h125n2fls308o1038.telia.com 81.227.243.125
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP10.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.networking:16119
>X-Tomcat-NG: microsoft.public.windows.server.networking
>
>Hi
>
>I have now collected the information you wanted and they are sent to you
by
>mail now.
>The client machine didnt write anything today in the userenv file, the
last
>time was 24/5 2005.
>
>Best regards
>Per-Olof Olsson
>
><fc9a9f82-(E-Mail Removed)> wrote in message
>news:(E-Mail Removed)...
>> Hi Amanda
>>
>> Sorry for the late answer, I am going to the customer tomorrow June 1st.
>> What I have for you now is the following answers:
>> 1. Yes every client is suffering from this
>> 2. The DNS is replicated throught sites and services
>> 3. The DNS settings on site B is distributed the following way to the
>> clients: (the DHCP scope settings)
>> Primary dns: site Bs win2k3 server
>> secondary dns: site As win2k server
>> same setup for wins...
>>
>> It shouldnt matter if i have the server at site A as a secondary DNS
>> server for the clients as long as the site B (primary DNS server) is
>> available right?
>> I will collect and mail u step 4. tomorrow at the site, hopefully you if
>> you are online you could have a peak to my posting there and give me an
>> aswer as I will be at the site during the day. That post should be here
>> around 1200 hours swedish time if you have that possibility....
>>
>> Kind Regards
>> Perra
>>
>> "Amanda Wang [MSFT]" <v-(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>>> Hello,
>>>
>>> I am just writing in to see if you have had an opportunity to try the
>>> troubleshooting steps or collect the information. If you have anything
>>> unclear with the previous information I've provide to you, please don't
>>> hesitate to let me know.
>>>
>>> I appreciate your time and I look forward to hearing from you.
>>>
>>> Thanks & Regards
>>>
>>> Amanda Wang [MSFT]
>>>
>>> Microsoft Online Partner Support
>>>
>>> Get Secure! - www.microsoft.com/security
>>>
>>> ================================================== ==================
>>>
>>> When responding to posts, please "Reply to Group" via your newsreader so
>>> that others may learn and benefit from your issue.
>>>
>>> ================================================== ===================
>>>
>>> --------------------
>>>>X-Tomcat-ID: 172217849
>>>>References: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>>>>MIME-Version: 1.0
>>>>Content-Type: text/plain
>>>>Content-Transfer-Encoding: 7bit
>>>>From: v-(E-Mail Removed) (Amanda Wang [MSFT])
>>>>Organization: Microsoft
>>>>Date: Fri, 27 May 2005 09:54:19 GMT
>>>>Subject: RE: Client performance problem windows 2003 server...
>>>>X-Tomcat-NG: microsoft.public.windows.server.networking
>>>>Message-ID: <(E-Mail Removed)>
>>>>Newsgroups: microsoft.public.windows.server.networking
>>>>Lines: 150
>>>>Path: TK2MSFTNGXA01.phx.gbl
>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>> microsoft.public.windows.server.networking:16022
>>>>NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
>>>>
>>>>Hello,
>>>>
>>>>Thanks for your post.
>>>>
>>>>I understand you encountered that following issue:
>>>>When the connection between the two sites is terminated, the clients at
>>>>site B becomes extremely slow to logon and even to access the local
>>>>server
>>>>at site B. If I have misunderstood your concern, please feel free to
let
>>>>me know.
>>>>
>>>>Based on my experience, this issue may be caused by the DNS. However,
>>>>the
>>>>troubleshooting steps may be complex and time-consuming. Therefore,
>>> please
>>>>take your time and patience in confirming and trying the following
things
>>>>so that we can isolate the issue:
>>>>
>>>>1. Does this issue happen on every client in Site B?
>>>>2. Have you replicated and synchronized the DNS between Site A and Site
>>>>B?
>>>>3. Verify DNS settings of the clients and Win2k3 Server in Site B. Try
>>>>to
>>>>point the clients' DNS server to the Win2k3 server in Site B. For
>>> example,
>>>>site A DC's IP is 192.168.0.1, Site B DC's IP is 192.168.1.1, point the
>>>>clients' DNS in Site B to 192.168.1.1.
>>>>
>>>>From this step, we can make sure client will contact the local DC for
the
>>>>logon authentication. Restart the client, does this issue disappear?
>>>>
>>>>4. If the issue persists, I would appreciate you collecting the
following
>>>>information and send to me at v-(E-Mail Removed) so that we can
>>> perform
>>>>further research on this issue:
>>>>
>>>>A. Collect the Userenv log on one of the problematic client machines
>>>>--------------------------------------
>>>>Use Registry Editor to add the following registry value (or modify it,
if
>>>>the value already exists):
>>>>Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
>>>>NT\CurrentVersion\Winlogon
>>>>
>>>>Value: UserEnvDebugLevel
>>>>Value Type: REG_DWORD
>>>>Value Data: 10002 (Hexadecimal)
>>>>
>>>>UserEnvDebugLevel can have the following values:
>>>>
>>>>NONE 0x00000000
>>>>NORMAL 0x00000001
>>>>VERBOSE 0x00000002
>>>>LOGFILE 0x00010000
>>>>DEBUGGER 0x00020000
>>>>The default value is NORMAL|LOGFILE (0x00010001).
>>>>
>>>>Note: To disable logging, select NONE (where the value is 0X00000000).
>>>>
>>>>You can also combine the values. For example, you can combine VERBOSE
>>>>0x00000002 and LOGFILE 0x00010000 to get 0x00010002. So if
>>>>UserEnvDebugLevel is set with a value of 0x00010002, this turns on both
>>>>LOGFILE and VERBOSE. Combining these values is the same as using an OR
>>>>statement:
>>>>
>>>>0x00010000 OR 0x00000002 = 0x00010002
>>>>
>>>>The log file is written to the %Systemroot%\Debug\UserMode\Userenv.log
>>>>file. If the Userenv.log exists and is greater than 300 KB, the existing
>>>>file will be renamed to Userenv.bak, and a new log file created.
>>>>
>>>>For more information please refer to the following Microsoft Knowledge
>>> Base
>>>>article.
>>>>
>>>>Q221833: How to Enable User Environment Event Logging
>>>>http://support.microsoft.com/default...B;EN-US;221833
>>>>
>>>>B. Collect Network MPS Report on both Win2k3 Server in Site B and one of
>>>>the problematic client machines.
>>>>------------------------------------
>>>>a. Visit
>>>>http://download.microsoft.com/downlo...-4fe5-a579-30b
0bd
>>> 9
>>>>15706/MPSRPT_NETWORK.EXE. to download the file.
>>>>b. Run the MPSRPT_NETWORK.EXE
>>>>c. Wait for 10~15 minutes.
>>>>d. Open Windows explorer, navigate to
>>>>%SYSTEMROOT%\MPSReports\Network\Reports\cab\
>>>>e. Send the .cab file directly to me.
>>>>
>>>>HTH! Any update, please keep in touch!
>>>>
>>>>Thanks & Regards
>>>>
>>>>Amanda Wang [MSFT]
>>>>
>>>>Microsoft Online Partner Support
>>>>
>>>>Get Secure! - www.microsoft.com/security
>>>>
>>>>============================================== ======================
>>>>
>>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>>that others may learn and benefit from your issue.
>>>>
>>>>============================================== =======================
>>>>
>>>>--------------------
>>>>>Thread-Topic: Client performance problem windows 2003 server...
>>>>>thread-index: AcVh1EE5heolLUKdSZGwhLy1iPEGRA==
>>>>>X-WBNR-Posting-Host: 194.132.162.3
>>>>>From: "=?Utf-8?B?ZmM5YTlmODItMjEyOTY5Mjg1MEBuZXdzLnBvc3RhbGlhcw ==?="
>>>><fc9a9f82-(E-Mail Removed)>
>>>>>Subject: Client performance problem windows 2003 server...
>>>>>Date: Thu, 26 May 2005 02:21:10 -0700
>>>>>Lines: 35
>>>>>Message-ID: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>>>>>MIME-Version: 1.0
>>>>>Content-Type: text/plain;
>>>>> charset="Utf-8"
>>>>>Content-Transfer-Encoding: 7bit
>>>>>X-Newsreader: Microsoft CDO for Windows 2000
>>>>>Content-Class: urn:content-classes:message
>>>>>Importance: normal
>>>>>Priority: normal
>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>>>>Newsgroups: microsoft.public.windows.server.networking
>>>>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>>microsoft.public.windows.server.networking:159 95
>>>>>X-Tomcat-NG: microsoft.public.windows.server.networking
>>>>>
>>>>>Hi
>>>>>
>>>>>I have a problem with the clients at site B, first I will shortly
>>> describe
>>>>>the situation.
>>>>>
>>>>>Setup:
>>>>>A Windows 2000 server was at first installed in site A (both
>>>>geographically
>>>>>and in the site configuration) this is acting as the "primary"
>>>>>domaincontroller.
>>>>>This server is GC, DDNS, DHCP, WINS, Print and file server.
>>>>>
>>>>>Then at site B there is a windows 2003 server. This is acting as a GC,
>>>>DDNS,
>>>>>WINS, file and print server.
>>>>>
>>>>>The sites are connected through a VPN tunnel with cisco pix firewalls.
>>> The
>>>>>internetconnection is at site A a dedicated connection and at site B a
>>>>ADSL
>>>>>1Mbit connection.
>>>>>
>>>>>The problem:
>>>>>When the connection between the two sites is terminated the clients at
>>>>site
>>>>>B becomes extreamly slow to logon and even to access the local server
at
>>>>site
>>>>>B. The clients only have mappings to shares on the server at site B.
>>>>>When
>>>>I
>>>>>check the clients uses site Bs server as logonserver. But the group
>>> policy
>>>>>seems to be picked up from site A:s server, So I dont know if that
could
>>>>slow
>>>>>down the file access to the local server at site B...
>>>>>
>>>>>Help would grately be appreciated.
>>>>>
>>>>>Best Regards
>>>>>Perra
>>>>>
>>>>>--
>>>>>________________________
>>>>>Per-Olof Olsson
>>>>>IT - Manager
>>>>>
>>>>
>>>>
>>>
>>
>>
>
>
>

Hello,

Please ignore my previous post because I haven't refreshed it and seen your
last two replies.

However, I haven't received your E-mail which has the information I
requested till now.

Based on your description and for the current situation, I found that the
issue is complex because it maybe is also related DFS and AD. Therefore,
please take your time and patience in performing the steps and suggestions
to isolate this issue.

According to your last reply, it seems site B's clients have not contacted
site B DC and it contact site A DC instead. I think that is why group
policy cannot be applied and why slow logon if disconnect to site A. When
site B's clients logon, it first contact site A's DC and try many times,
and then the clients use cached logon to logon to the domain.

To confirm my suspicion, please help me check the following things:
1. If the site B has been created and put DC B into site B in "Active
Directory Sites and Services" on site A's DC. Then replicated these two
sites, the following article for your references:

Active Directory Replication
http://www.microsoft.com/resources/d...server/reskit/
en-us/Default.asp?url=/resources/documentation/windows/2000/server/reskit/en
-us/distrib/dsbh_rep_eprf.asp

What Is Active Directory Replication Topology?
http://www.microsoft.com/technet/pro.../library/TechR
ef/0ac09f72-a790-48a9-a72f-d7328f9d937f.mspx

2. I noticed that you mentioned the following two mapped links:

NET USE G: \\smedjan.local\DFSroot\Verktyg_Gemensam /PERSISTENT:NO
NET USE G: \\verktyg\Verktyg_Gemensam$ /PERSISTENT:NO

I want to know if \\smedjan.local is a domain name and verktyg is file
server's name. Based on this, I have two questions:

a. Where is the file server? In site A or site B?
b. If do not use map drive, does this issue occur?

3. If the issue still persists, please disconnect from site A, reproduce
this issue and get userenv log and MPSReport and send to me at
v-(E-Mail Removed) and these information is very helpful for our
further research.

HTH and thanks for your patience. Anything update, please keep in touch!

Thanks & Regards

Amanda Wang [MSFT]

Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

================================================== ==================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===================

--------------------
>X-Tomcat-ID: 348362238
>References: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
<(E-Mail Removed)>
<(E-Mail Removed)>
<(E-Mail Removed)>
<(E-Mail Removed)>
>MIME-Version: 1.0
>Content-Type: text/plain
>Content-Transfer-Encoding: 7bit
>From: v-(E-Mail Removed) (Amanda Wang [MSFT])
>Organization: Microsoft
>Date: Wed, 01 Jun 2005 10:20:41 GMT
>Subject: Re: Client performance problem windows 2003 server...
>X-Tomcat-NG: microsoft.public.windows.server.networking
>Message-ID: <R#(E-Mail Removed)>
>Newsgroups: microsoft.public.windows.server.networking
>Lines: 296
>Path: TK2MSFTNGXA01.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.networking:16121
>NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
>
>Hi Perra,
>
>Glad to hear from you.
>
>I noticed that you mentioned that when the connection between the two
sites
>is terminated, the clients at site B becomes extremely slow to logon and
>even to access the local server at site B.
>
>Do you mean only when the connection between two sites is terminated, the
>clients in Site B log on very slow?
>
>Meanwhile according to the clients¡¯ DNS and WINS settings in Site B, I
>suggest you only set the Primary DNS and WINS to point to Win2k3 server to
>see if it works.
>
>Please try it and collect the information I requested in my previous reply
>and send to me at v-(E-Mail Removed). Anything update, please keep in
>touch.
>
>Thanks & Regards
>
>Amanda Wang [MSFT]
>
>Microsoft Online Partner Support
>
>Get Secure! - www.microsoft.com/security
>
>================================================= ===================
>
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
>
>================================================= ====================
>
>--------------------
>>From: <fc9a9f82-(E-Mail Removed)>
>>References: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
><(E-Mail Removed)>
><(E-Mail Removed)>
><(E-Mail Removed)>
>>Subject: Re: Client performance problem windows 2003 server...
>>Date: Wed, 1 Jun 2005 11:16:13 +0200
>>Lines: 267
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>X-RFC2646: Format=Flowed; Response
>>Message-ID: <(E-Mail Removed)>
>>Newsgroups: microsoft.public.windows.server.networking
>>NNTP-Posting-Host: h125n2fls308o1038.telia.com 81.227.243.125
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP10.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl
>microsoft.public.windows.server.networking:1611 9
>>X-Tomcat-NG: microsoft.public.windows.server.networking
>>
>>Hi
>>
>>I have now collected the information you wanted and they are sent to you
>by
>>mail now.
>>The client machine didnt write anything today in the userenv file, the
>last
>>time was 24/5 2005.
>>
>>Best regards
>>Per-Olof Olsson
>>
>><fc9a9f82-(E-Mail Removed)> wrote in message
>>news:(E-Mail Removed)...
>>> Hi Amanda
>>>
>>> Sorry for the late answer, I am going to the customer tomorrow June 1st.
>>> What I have for you now is the following answers:
>>> 1. Yes every client is suffering from this
>>> 2. The DNS is replicated throught sites and services
>>> 3. The DNS settings on site B is distributed the following way to the
>>> clients: (the DHCP scope settings)
>>> Primary dns: site Bs win2k3 server
>>> secondary dns: site As win2k server
>>> same setup for wins...
>>>
>>> It shouldnt matter if i have the server at site A as a secondary DNS
>>> server for the clients as long as the site B (primary DNS server) is
>>> available right?
>>> I will collect and mail u step 4. tomorrow at the site, hopefully you
if
>>> you are online you could have a peak to my posting there and give me an
>>> aswer as I will be at the site during the day. That post should be here
>>> around 1200 hours swedish time if you have that possibility....
>>>
>>> Kind Regards
>>> Perra
>>>
>>> "Amanda Wang [MSFT]" <v-(E-Mail Removed)> wrote in message
>>> news:(E-Mail Removed)...
>>>> Hello,
>>>>
>>>> I am just writing in to see if you have had an opportunity to try the
>>>> troubleshooting steps or collect the information. If you have anything
>>>> unclear with the previous information I've provide to you, please don't
>>>> hesitate to let me know.
>>>>
>>>> I appreciate your time and I look forward to hearing from you.
>>>>
>>>> Thanks & Regards
>>>>
>>>> Amanda Wang [MSFT]
>>>>
>>>> Microsoft Online Partner Support
>>>>
>>>> Get Secure! - www.microsoft.com/security
>>>>
>>>> ================================================== ==================
>>>>
>>>> When responding to posts, please "Reply to Group" via your newsreader
so
>>>> that others may learn and benefit from your issue.
>>>>
>>>> ================================================== ===================
>>>>
>>>> --------------------
>>>>>X-Tomcat-ID: 172217849
>>>>>References: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>>>>>MIME-Version: 1.0
>>>>>Content-Type: text/plain
>>>>>Content-Transfer-Encoding: 7bit
>>>>>From: v-(E-Mail Removed) (Amanda Wang [MSFT])
>>>>>Organization: Microsoft
>>>>>Date: Fri, 27 May 2005 09:54:19 GMT
>>>>>Subject: RE: Client performance problem windows 2003 server...
>>>>>X-Tomcat-NG: microsoft.public.windows.server.networking
>>>>>Message-ID: <(E-Mail Removed)>
>>>>>Newsgroups: microsoft.public.windows.server.networking
>>>>>Lines: 150
>>>>>Path: TK2MSFTNGXA01.phx.gbl
>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windows.server.networking:16022
>>>>>NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
>>>>>
>>>>>Hello,
>>>>>
>>>>>Thanks for your post.
>>>>>
>>>>>I understand you encountered that following issue:
>>>>>When the connection between the two sites is terminated, the clients at
>>>>>site B becomes extremely slow to logon and even to access the local
>>>>>server
>>>>>at site B. If I have misunderstood your concern, please feel free to
>let
>>>>>me know.
>>>>>
>>>>>Based on my experience, this issue may be caused by the DNS. However,
>>>>>the
>>>>>troubleshooting steps may be complex and time-consuming. Therefore,
>>>> please
>>>>>take your time and patience in confirming and trying the following
>things
>>>>>so that we can isolate the issue:
>>>>>
>>>>>1. Does this issue happen on every client in Site B?
>>>>>2. Have you replicated and synchronized the DNS between Site A and
Site
>>>>>B?
>>>>>3. Verify DNS settings of the clients and Win2k3 Server in Site B.
Try
>>>>>to
>>>>>point the clients' DNS server to the Win2k3 server in Site B. For
>>>> example,
>>>>>site A DC's IP is 192.168.0.1, Site B DC's IP is 192.168.1.1, point the
>>>>>clients' DNS in Site B to 192.168.1.1.
>>>>>
>>>>>From this step, we can make sure client will contact the local DC for
>the
>>>>>logon authentication. Restart the client, does this issue disappear?
>>>>>
>>>>>4. If the issue persists, I would appreciate you collecting the
>following
>>>>>information and send to me at v-(E-Mail Removed) so that we can
>>>> perform
>>>>>further research on this issue:
>>>>>
>>>>>A. Collect the Userenv log on one of the problematic client machines
>>>>>--------------------------------------
>>>>>Use Registry Editor to add the following registry value (or modify it,
>if
>>>>>the value already exists):
>>>>>Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
>>>>>NT\CurrentVersion\Winlogon
>>>>>
>>>>>Value: UserEnvDebugLevel
>>>>>Value Type: REG_DWORD
>>>>>Value Data: 10002 (Hexadecimal)
>>>>>
>>>>>UserEnvDebugLevel can have the following values:
>>>>>
>>>>>NONE 0x00000000
>>>>>NORMAL 0x00000001
>>>>>VERBOSE 0x00000002
>>>>>LOGFILE 0x00010000
>>>>>DEBUGGER 0x00020000
>>>>>The default value is NORMAL|LOGFILE (0x00010001).
>>>>>
>>>>>Note: To disable logging, select NONE (where the value is 0X00000000).
>>>>>
>>>>>You can also combine the values. For example, you can combine VERBOSE
>>>>>0x00000002 and LOGFILE 0x00010000 to get 0x00010002. So if
>>>>>UserEnvDebugLevel is set with a value of 0x00010002, this turns on both
>>>>>LOGFILE and VERBOSE. Combining these values is the same as using an OR
>>>>>statement:
>>>>>
>>>>>0x00010000 OR 0x00000002 = 0x00010002
>>>>>
>>>>>The log file is written to the %Systemroot%\Debug\UserMode\Userenv.log
>>>>>file. If the Userenv.log exists and is greater than 300 KB, the
existing
>>>>>file will be renamed to Userenv.bak, and a new log file created.
>>>>>
>>>>>For more information please refer to the following Microsoft Knowledge
>>>> Base
>>>>>article.
>>>>>
>>>>>Q221833: How to Enable User Environment Event Logging
>>>>>http://support.microsoft.com/default...B;EN-US;221833
>>>>>
>>>>>B. Collect Network MPS Report on both Win2k3 Server in Site B and one
of
>>>>>the problematic client machines.
>>>>>------------------------------------
>>>>>a. Visit
>>>>>http://download.microsoft.com/downlo...c-4fe5-a579-30
b
>0bd
>>>> 9
>>>>>15706/MPSRPT_NETWORK.EXE. to download the file.
>>>>>b. Run the MPSRPT_NETWORK.EXE
>>>>>c. Wait for 10~15 minutes.
>>>>>d. Open Windows explorer, navigate to
>>>>>%SYSTEMROOT%\MPSReports\Network\Reports\cab \
>>>>>e. Send the .cab file directly to me.
>>>>>
>>>>>HTH! Any update, please keep in touch!
>>>>>
>>>>>Thanks & Regards
>>>>>
>>>>>Amanda Wang [MSFT]
>>>>>
>>>>>Microsoft Online Partner Support
>>>>>
>>>>>Get Secure! - www.microsoft.com/security
>>>>>
>>>>>============================================= =======================
>>>>>
>>>>>When responding to posts, please "Reply to Group" via your newsreader
so
>>>>>that others may learn and benefit from your issue.
>>>>>
>>>>>============================================= ========================
>>>>>
>>>>>--------------------
>>>>>>Thread-Topic: Client performance problem windows 2003 server...
>>>>>>thread-index: AcVh1EE5heolLUKdSZGwhLy1iPEGRA==
>>>>>>X-WBNR-Posting-Host: 194.132.162.3
>>>>>>From: "=?Utf-8?B?ZmM5YTlmODItMjEyOTY5Mjg1MEBuZXdzLnBvc3RhbGlhcw ==?="
>>>>><fc9a9f82-(E-Mail Removed)>
>>>>>>Subject: Client performance problem windows 2003 server...
>>>>>>Date: Thu, 26 May 2005 02:21:10 -0700
>>>>>>Lines: 35
>>>>>>Message-ID: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
>>>>>>MIME-Version: 1.0
>>>>>>Content-Type: text/plain;
>>>>>> charset="Utf-8"
>>>>>>Content-Transfer-Encoding: 7bit
>>>>>>X-Newsreader: Microsoft CDO for Windows 2000
>>>>>>Content-Class: urn:content-classes:message
>>>>>>Importance: normal
>>>>>>Priority: normal
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>>>>>Newsgroups: microsoft.public.windows.server.networking
>>>>>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>>>microsoft.public.windows.server.networking:15 995
>>>>>>X-Tomcat-NG: microsoft.public.windows.server.networking
>>>>>>
>>>>>>Hi
>>>>>>
>>>>>>I have a problem with the clients at site B, first I will shortly
>>>> describe
>>>>>>the situation.
>>>>>>
>>>>>>Setup:
>>>>>>A Windows 2000 server was at first installed in site A (both
>>>>>geographically
>>>>>>and in the site configuration) this is acting as the "primary"
>>>>>>domaincontroller.
>>>>>>This server is GC, DDNS, DHCP, WINS, Print and file server.
>>>>>>
>>>>>>Then at site B there is a windows 2003 server. This is acting as a GC,
>>>>>DDNS,
>>>>>>WINS, file and print server.
>>>>>>
>>>>>>The sites are connected through a VPN tunnel with cisco pix firewalls.
>>>> The
>>>>>>internetconnection is at site A a dedicated connection and at site B a
>>>>>ADSL
>>>>>>1Mbit connection.
>>>>>>
>>>>>>The problem:
>>>>>>When the connection between the two sites is terminated the clients at
>>>>>site
>>>>>>B becomes extreamly slow to logon and even to access the local server
>at
>>>>>site
>>>>>>B. The clients only have mappings to shares on the server at site B.
>>>>>>When
>>>>>I
>>>>>>check the clients uses site Bs server as logonserver. But the group
>>>> policy
>>>>>>seems to be picked up from site A:s server, So I dont know if that
>could
>>>>>slow
>>>>>>down the file access to the local server at site B...
>>>>>>
>>>>>>Help would grately be appreciated.
>>>>>>
>>>>>>Best Regards
>>>>>>Perra
>>>>>>
>>>>>>--
>>>>>>________________________
>>>>>>Per-Olof Olsson
>>>>>>IT - Manager
>>>>>>
>>>>>
>>>>>
>>>>
>>>
>>>
>>
>>
>>
>
>

Hi,

I will try to mail you the previously discussed files again.

1. The Site B has server B in that site and Site A has server A in its site.
Do you want me to pu both of the servers in site A?

2. \\smedjan.local is the domain name and verktyg is the file servers name.
a, the file server is Server B in site B
b, If I dont map the shares theere is no problem, so the mapping is a
problem, or to find the right way to map drives seems to be a problem...

3. I will get you a report next time I go to my customer wich I hope can be
this week.

Best Regards
Perra

Hello,

Thanks for your response.

First, I would like give a summary of this issue including setup
environment, main issue you encountered and the actions we have performed.

Setup environment:
============
A Windows 2000 server was at first installed in site A (both geographically
and in the site configuration) this is acting as the "primary" domain
controller.
This server is GC, DDNS, DHCP, WINS, Print and file server.

Then at site B there is a windows 2003 server. This is acting as a GC,
DDNS,
WINS, file and print server.

The sites are connected through a VPN tunnel with cisco pix firewalls. The
internet connection is at site A a dedicated connection and at site B a
ADSL 1Mbit connection.

Issue:
==============
When the connection between the two sites is terminated, the clients at
site B becomes extremely slow to logon and even to access the local server
at site B.

Actions:
====================
1. Yes every client in Site B is suffering from this
2. The DNS is replicated through sites and services
3. The DNS settings on site B is distributed the following way to the
clients: (the DHCP scope settings)
Primary dns: site Bs win2k3 server
Secondary dns: site As win2k server
Same setup for wins...
4. The mappings on the clients are mapped like this:
NET USE G: \\smedjan.local\DFSroot\Verktyg_Gemensam /PERSISTENT:NO
If change it to NET USE G: \\verktyg\Verktyg_Gemensam$ /PERSISTENT:NO
then the problem with slow connections disappears.
\\smedjan.local is the domain name and verktyg is the file server's name.
a, the file server is Server B in site B
b, If don't map the shares there is no problem

5. If change the group policy setting on the w2k3 server at site B the
policy won't be applied to the clients until the w2k server at site A has
that group policy information. Even if run GPUPDATE on the clients and
server.
If make a change in the policies on w2k server at site A the clients gets
that policy applied directly with GPUPDATE.

Now from the above conclusion, we can find the issue should have two
aspects:

1. It seems that Site B's clients cannot authenticate by Win2k3 server. It
may be caused by DNS replication.
2. It may be caused by the mappings and it looks like a DFSroot issue

Therefore, we can perform the following steps to isolate the issue:
1. Terminate the connection between site A and B
2. Boot one client computer by using safe mode with network
3. Don't map the shares and check if the slow logon issue still persists on
this client.
4. How long will it take in logging on?
This test will help us isolate if the issue is caused by replication
between A and B or by DFSroot.

The issue is complex and Network MPSReport and Userenv log on files are
very important for us to perform further research on it.

I don't know why I haven't received your E-mail last time. Would you
please use two different E-mail accounts to send the information I
requested to me at v-(E-Mail Removed)? You effort on this issue would
be appreciated and I'm looking forward to hearing from you.

Thanks & Regards

Amanda Wang [MSFT]

Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

================================================== ==================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===================

--------------------
>From: <fc9a9f82-(E-Mail Removed)>
>References: <7C9E0C9C-D9DA-4D57-B9CF-(E-Mail Removed)>
<(E-Mail Removed)>
<(E-Mail Removed)>
<(E-Mail Removed)>
<(E-Mail Removed)>
<R#(E-Mail Removed)>
<(E-Mail Removed)>
>Subject: Re: Client performance problem windows 2003 server...
>Date: Mon, 13 Jun 2005 13:57:41 +0200
>Lines: 19
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <#(E-Mail Removed)>
>Newsgroups: microsoft.public.windows.server.networking
>NNTP-Posting-Host: mail.wermtec.se 194.132.162.3
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP15.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.networking:16505
>X-Tomcat-NG: microsoft.public.windows.server.networking
>
>Hi,
>
>I will try to mail you the previously discussed files again.
>
>1. The Site B has server B in that site and Site A has server A in its
site.
>Do you want me to pu both of the servers in site A?
>
>2. \\smedjan.local is the domain name and verktyg is the file servers name.
>a, the file server is Server B in site B
>b, If I dont map the shares theere is no problem, so the mapping is a
>problem, or to find the right way to map drives seems to be a problem...
>
>3. I will get you a report next time I go to my customer wich I hope can
be
>this week.
>
>Best Regards
>Perra
>
>
>