Dito on the Firewall: I've had this with a client who insisted that they don't have any XP or W2k Clients - after the AD migration we found 500 W2k Laptops connecting via a Firewall - logon took 15 - 20 min. Switched the domain to NT4 Emulation until the Firewall was changed and everything was OK.
Another thing which comes into my mind: Group Policies which hold names of groups which are not resolveable anymore (another domain removed or groups removed). But AFAIK you can monitor those on the DC. Last but not least you can look into the userenv.log file in %systemroot%\Debug\UserMode - perhaps it gives you a hint where this behavior is coming from. HTH, Ulf -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brent Westmoreland Sent: Donnerstag, 1. April 2004 21:06 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Domain clients hangs before logon, multiple issues I have seen this problem when there is a DNS error that causes the machine to go to an alternate server for Group Policy processing. I have also experienced it when their is a firewall between the client and the server and the appropriate RPC ports were not opened. Hope that helps. Brent On Apr 1, 2004, at 1:52 PM, <[EMAIL PROTECTED]> wrote: > > > > > you don't say, unless i missed it, if you're using dhcp? > if so, and any kind of personal firewalls, could just not be getting > an ip....trying and trying...we've seen this with checkpoint. i would > also guess that ipsec, or any kind of packet filtering would do the > same, if not configured right. pulling the patch and logging in with > cached credentials seemed to fix that every time. we finally came up > with a script that would turn it off upon login. > > have also seen this when the media type for the nic was set > wrong...auto select seems to work best for us, at least. > > on laptops....the synaptics touch pad driver can make a box hang > forever...pulling it out, or possibly getting the newest will fix > it...but, you don't mention laptops either. > > just some things to ponder... > > > > > > > > > |---------+----------------------------------> > | | "J0mb" | > | | <[EMAIL PROTECTED]| > | | rg> | > | | Sent by: | > | | [EMAIL PROTECTED]| > | | tivedir.org | > | | | > | | | > | | 04/01/2004 11:54 AM | > | | Please respond to | > | | ActiveDir | > | | | > |---------+----------------------------------> >> --------------------------------------------------------------------- >> - >> ------------------------------------------------| > | > | > | To: <[EMAIL PROTECTED]> > | > | cc: > | > | Subject: [ActiveDir] Domain clients hangs before logon, > multiple issues | >> --------------------------------------------------------------------- >> - >> ------------------------------------------------| > > > > > > Good morning, > i've recently runned into a weird problem i wasn't able to track down > yet. > Yesterday morning a number of users reported that their domain PCs > would hang loading the Operating system just before the logon screen > would appear. > they're all stuck on Applying computer settings. > The moment i unplug the network cable the PC will finish its startup > procedure and show the logon screen. > > The network is made of a single forest/single domain, all DCs are > Win2000 Server SP4. 4 sites across 2 Mb fast links (no evidence of > traffic overload). Each site has 2 Dcs including the one (and only) > site where the problem has been reported. > DCs seem to perform fine. They have been rebooted, checked event logs, > checked with netdiag and dcdiag. replication is working fine. None of > the 2 DCs in the affected site hold FSMo roles. All other DCs on the > network are working fine. > There have been no modifications on group policies, memeberships so > forth. > Sysvol and netlogon shares are accessible. One of the 2 DCs in the > site is the AD DNS server for the site and shows no problem (can > resolve queries, can register records, SRV records are present and > appear correct). > > on the client side: this has been reported on random machines attached > to different network hardware. They're a mix of WinXP and 2000 > machines, though the problem seems to affect mainly win2000. EventID > 3034 is logged (checked most comments from eventid.net). client time > looks synched with the DCs time. Once the machine is started through > the unplugging cable tweak it's able to resolve from AD DNS. All > network settings have been checked twice both for server and client > and appear correct. Hosts file is clean. > Attempted to remove one machine from the domain, and it would reboot > fine. > however, it was a hard task to join it again to the domain (reported > RPC errors, network name no more valid...finally i could join it to > the domain but it started showing the issue again...). The issue has > been reported on 15-20 domain machines out of about 200. > > Please, please..help! I just can't get out of it (the problem...the > office). > > thank you! > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
