Logging into domain takes several minutes

Logging into domain takes several minutes

Post by derek2318 » Sun, 09 Nov 2003 15:27:13


I am hoping someone can help. I have a Windows 2000
Server with 5 client machines. The server was promoted
to a DC however during the dcpromo process I used a
different NETBIOS name then the Domain Name. I assigned
them as follows:

Netbios:
mydomain

Domain
mydomain.com

Everything appears to be working fine, however when I log
a client into the domain, it takes several minutes for
the login to occur. I am not using a roaming profile.

In researching this online, there is a KB article:
"822402 : Domain Controller Takes a Long Time to Respond
to a Logon Request"

This article details that this problem may occur if the
Netbios name is different then the DNS name.

What I would like to do is change the Netbios name to
match, but I cannot figure out how to do this without
running dcpromo again. Can anyone help?
 
 
 

Logging into domain takes several minutes

Post by Herb Marti » Sun, 09 Nov 2003 18:27:43

> I am hoping someone can help. I have a Windows 2000

Most people would consider that to be the same name -- although
technically it is different, and merely the EQUIVALENT name.

NetBIOS doesn't support structured, hierarchical names like DNS so
DCPromo would have DEFAULTED to your choice above and nearly
all of us do exactly what you did.


This is not due to that NAME above but it is likely due to NAME
RESOLUTION issues.


The NetBIOS name is (pratically) always different from the DNS
name (in the sense in which YOU used different.)


No, leave it that way and let's check the DNS server.

DNS server must be DYNAMIC.
Clients, including the DC and DNS server must be configure to ONLY
the INTERNAL (Dynamic) DNS server (set.)
Do not also configure the clients (or DC) to use an external DNS server
(use forwarding if you need -- as most do -- Internet resolution)
IF you change either the DNS or the DC pointing to it, restart NetLogon
Service

If the above does not fix it trivially then run DCDiag (from CDROM Support
Tools),
save the output to a file, and search for FAIL, WARN, or ERROR

Post the output here if you cannot fix it from that.

--
Herb Martin

 
 
 

Logging into domain takes several minutes

Post by Ace Fekay » Mon, 10 Nov 2003 00:04:37


Herb Martin < XXXX@XXXXX.COM > posted their thoughts, then I offered mine

You're right Herb. This is indicative of the ISP's DNS addresses being used.

Note to XXXX@XXXXX.COM : This can also cause numerous other problems.
Suggest to remove the ISP addresses immediately (from clients and DCs) and
also suggest (recommended) to configure a forwarder for efficient Internet
resolution.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
--
=================================
 
 
 

Logging into domain takes several minutes

Post by anonymou » Mon, 10 Nov 2003 02:05:18

erb, Ace,

Thank you both for the very valuable information!

I did indeed have the clients pointing to my ISP's DNS.
Using this information, I fully configured DNS on the DC
and enabled DNS forwarding. The clients now point to the
DC for resolution.

Running DCDiag results in all passes now and my logins on
each client now only take in the area of ~5-8 seconds.
This is great!!

Thank you both very much. I now feel far more educated in
DNS!

Derek

then I offered mine
assigned
although
name.
like DNS so
nearly
log
to NAME
the DNS
configure to ONLY
external DNS
do -- Internet
pointing to
(from CDROM
WARN, or ERROR
addresses being used.
numerous other problems.
clients and DCs) and
efficient Internet
benefit.
 
 
 

Logging into domain takes several minutes

Post by Ace Fekay » Mon, 10 Nov 2003 07:03:05


XXXX@XXXXX.COM < XXXX@XXXXX.COM >
posted their thoughts, then I offered mine

No prob Derek.

Keep in mind, there;s more to DNS, but as for AD & DNS, you got the major
stuff *** ed so far!
:-)


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
--
=================================