Painfully Slow Windows XP Login Through VPN

I am working to deploy site-to-site VPN's throughout all our satellite
offices. I am using SonicWALL firewalls to accomplish this.

I have a test setup in our office through a cable Internet connection
with working site-to-site VPN to our main office LAN.

I have a Windows XP Pro workstation setup with all latest patches and
service packs. It takes roughly 15 minutes or more to login with any
user account. After that, things seem to run fine. Unfortunately,
the users aren't going to tolerate a long login time like this. This
is true even for the test basic user account with minimal settings.

I have roaming profile down to a minimum with the My Documents and
Desktop folders actually housed on the main office file servers.

In my attempts to setup a disaster recovery site, I even have a full
domain controller with DNS on the same side as the workstation.

I can ping all the servers by name and everything seems to be in
order.

Why is the logon process taking so long?

Any ideas or suggestions?

Thanks!

-Tim

It depends on GC. The clients would always check for the DC/GC in their own site first.

authentication goes across the wan Case Study - Client authentication goes across the WAN. Situation: There are two offices located in different cities connecting with T1 line. ...
www.howtonetworking.com/casestudy/ad1.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"T. Garay" <moc.etluhcS-noirehpS@yhtomiT> wrote in message news:(E-Mail Removed)...
I am working to deploy site-to-site VPN's throughout all our satellite
offices. I am using SonicWALL firewalls to accomplish this.

I have a test setup in our office through a cable Internet connection
with working site-to-site VPN to our main office LAN.

I have a Windows XP Pro workstation setup with all latest patches and
service packs. It takes roughly 15 minutes or more to login with any
user account. After that, things seem to run fine. Unfortunately,
the users aren't going to tolerate a long login time like this. This
is true even for the test basic user account with minimal settings.

I have roaming profile down to a minimum with the My Documents and
Desktop folders actually housed on the main office file servers.

In my attempts to setup a disaster recovery site, I even have a full
domain controller with DNS on the same side as the workstation.

I can ping all the servers by name and everything seems to be in
order.

Why is the logon process taking so long?

Any ideas or suggestions?

Thanks!

-Tim

I did a "set logonserver" and the workstation did authenticate to the
local (on it's side of the VPN) domain controller.

My issue is that it doesn't matter if there is a domain controller on
the workstation side of the VPN or not, it still takes 15 minutes for
a user to logon over a site-to-site VPN via a 1.5Mbit connection.

My test user account has a roaming profile size of only 2.5MB. It
shouldn't take 15 minutes to download a profile of that size.

What might be going on that is taking so long?

Thanks!

-Tim

On Thu, 14 Sep 2006 17:09:47 -0500, "Robert L [MVP - Networking]"
<(E-Mail Removed)> wrote:

>It depends on GC. The clients would always check for the DC/GC in their own site first.
>
>authentication goes across the wan Case Study - Client authentication goes across the WAN. Situation: There are two offices located in different cities connecting with T1 line. ...
> www.howtonetworking.com/casestudy/ad1.htm
>
>
>Bob Lin, MS-MVP, MCSE & CNE
>Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
>How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "T. Garay" <moc.etluhcS-noirehpS@yhtomiT> wrote in message news:(E-Mail Removed)...
> I am working to deploy site-to-site VPN's throughout all our satellite
> offices. I am using SonicWALL firewalls to accomplish this.
>
> I have a test setup in our office through a cable Internet connection
> with working site-to-site VPN to our main office LAN.
>
> I have a Windows XP Pro workstation setup with all latest patches and
> service packs. It takes roughly 15 minutes or more to login with any
> user account. After that, things seem to run fine. Unfortunately,
> the users aren't going to tolerate a long login time like this. This
> is true even for the test basic user account with minimal settings.
>
> I have roaming profile down to a minimum with the My Documents and
> Desktop folders actually housed on the main office file servers.
>
> In my attempts to setup a disaster recovery site, I even have a full
> domain controller with DNS on the same side as the workstation.
>
> I can ping all the servers by name and everything seems to be in
> order.
>
> Why is the logon process taking so long?
>
> Any ideas or suggestions?
>
> Thanks!
>
> -Tim