Humm... I'm discovering amazing things while digging over here. I added this new computer into the domain as a test... still works. With the same user that takes 3 minutes on a computer that is just about identical... The thing with troubleshoot that the computers haven't learned is that they need to behave the same way if they are set up the same. At least I'm getting closer to the problem at hand. I will look into DNS. Gunnar -----Original Message----- From: Brian Anderson [mailto:BAnderson@xxxxxxxxxx] Sent: Thursday, October 30, 2003 2:57 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Profiles I might be off in this particular case, but the first thing that comes to mind when I hear this is DNS, DNS, DNS -----Original Message----- From: Berger, Gunnar [mailto:GBerger@xxxxxxxxxx] Sent: Thursday, October 30, 2003 12:25 To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Profiles Okay this is big news. I figured out where this issues lies. I setup a new machine (an old crappy one) and I didn't add the machine to my domain. I installed Citrix PN on it put in a user/password/domain, ba da bing I'm in 8-10 seconds. No issues. So this problem needs to be restated as such. User logons take 3 minutes when using a computer from inside the domain. Same user can log in a 8 seconds if computer is not part of domain. Lots of help needed. Gunnar -----Original Message----- From: Berger, Gunnar Sent: Thursday, October 30, 2003 9:47 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Profiles I've been working on this with both real users and test users. Both users get the same problems. With my test users I not setting a terminal server profile path, it is just running locally off a TS. Permission on Documents and Settings are whatever they are set by default, I've never touched them or had need to. However, if I go inside the directory and look at a users folder the security settings are set for full control for the user the domain admin and for the system. If I look at the security settings on the Documents and Settings folder this is what I have: Administrators FULL Everyone R & E, List Folders, Read ?1-5-32-547 R & E, List Folders, Read System FULL Users R & E, List Folders, Read I don't know what that ? thing is all about. Permissions on the TS Profile path for those that use a TS profile path (meaning real users) is Full control. They have access to screw around with each other profiles even, I don't care, I opened that thing wide open to make sure it wasn't a permissions issue. FULL control to EVERYONE group. profile size on average is less than a meg. although I do have the user who has 12 meg profile. I would delete it but there is no point, it's local for one, and secondly this isn't a profile issue. I can log in as any one of these users (including Mrs. 12Meg) from my machine and it logs in in 8 seconds. It is only from every other machine on this network that it takes 3 minutes. I need to figure out what is different about my machine than the other machines on this network. The only thing I can think of is this machine is not a part of the domain, it is the only machine running XP home. Gunnar -----Original Message----- From: Claus, Brian [mailto:BClaus@xxxxxxxxxxxxx] Sent: Thursday, October 30, 2003 9:37 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Profiles What's your terminal server profile path set to? What are your permissions on Documents and Settings? What are your permissions on your terminal server profile path? How large are the profiles your users have to load? _____ Brian Claus, A+, Network+, MCP Network Administrator WESCO Distribution, Inc. 225 West Station Square Drive, Suite 700 Pittsburgh, PA 15219-1122 Phone: 412-454-2412 Fax: 412-454-2540 <mailto:bclaus@xxxxxxxxxxxxx> bclaus@xxxxxxxxxxxxx _____ -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Berger, Gunnar Sent: Thursday, October 30, 2003 8:42 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Profiles Okay, I have just verified that any users logging in from my workstation can log in normally. So that means this is not a permissions issue or a profile issues. (Yes I still need to get modprof.exe working but I can worry about that later.) Right now, I need help on figuring out why my workstation can log into Citrix in 8 seconds whereas the rest of my users take 3 minutes. I'm not even sure how to begin to troubleshoot this one. Gunnar -----Original Message----- From: Berger, Gunnar [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Berger, Gunnar Sent: Thursday, October 30, 2003 7:48 AM To: windows2000@xxxxxxxxxxxxx Subject: RE: [windows2000] Re: Profiles Here is what really gets me. My non-admin user can login in seconds! The problem simply does not exist when connecting from my computer. I'm going to try and use my user at a different workstation and see if the problem exists. However, I feel that this may be my workstation that connects without issue. The only difference between my workstations and the others, is I'm not part of the domain. How would that make a difference. I would think that would slow me down. Exteremely Confused, Gunnar -----Original Message----- From: Braebaum, Neil [mailto:Neil.Braebaum@xxxxxxxxxxxxxxxxx] Sent: Thu 10/30/2003 4:33 AM To: windows2000@xxxxxxxxxxxxx Cc: Subject: [windows2000] Re: Profiles For what it's worth, I've run Citrix / TS servers for over 5 years, and although use network profiles, have always used mandatory profiles. This helps with login speed, because you can tune and trim the size of the profile loaded. I personalise it, where needed, largely by scripting - things like the user details for Office, and outlook profile by using modprof (and of course a tailored prf file). Also redirecting certain folders outside of the profile structure (temporary internet files, favorites, that sort of thing) can keep the size of normal profiles down - and if need be, still have a certain degree of personalised mandatory profile. There is middle ground, here, too in the form of hybrid profiles (effectively a warm, soothing blend of roaming profiles and mandatory profiles) which sort of extends the idea of scripting, to personalise the profile, by doing it login and logout and working on certain folders / registry hierarchies. To speed login up, though, normally is a matter of trimming the profile loaded (assuming all other factors are OK), that and optimising the login script environment. Mandatory profiles can make this much quicker and simpler from an admin perspective, the only issue is the technical complexity of the environment deployed, and a possible lack of flexibility / customisation available to the users (probably not largely a problem for TS / Citrix environments). Neil > Subject: [windows2000] Profiles > Date: Wed, 29 Oct 2003 07:34:26 -0500 > From: "Berger, Gunnar" <GBerger@xxxxxxxxxx> > > Hello all, > > I'm guessing the majority of you out there use modprof.exe or > newprof.exe to take care of your Outlook/Exchange issues. I > had this working myself at one point in time but for the past > 4 months I have not been able to get this to work properly. > I use roaming TS profiles in my environment because my Citrix > servers are load balanced. However, it takes my users a > little over 2 minutes to log on to the server. I just > bought new Citrix servers and I'm setting them up from > scratch. I need to get these things to work like they are > suppose to, it used to take 10 seconds to log in and I need > that type of response again. > > Here is the really weird part, there is only one users on my > network (me) that it responds correctly to. It takes me only > a few seconds to bring up a Citrix app. I have checked my > settings on the server (Active Directory) and they are the > same as anyone else. The only difference between myself and > the rest of the users is I'm stuck with XP Home on my machine > so it is not a part of the network. I don't see how this > could be related but maybe it is. My standard setup for my > workstations is Windows 2000 Pro. This may be permissions > related on my profiles but I'm not sure. Ideally I wouldn't > even have to use profiles, or I would use them and they would > delete on log out. > > I am at the point where if it cost money to fix these log on > issues I am free to do it. I found a program called Imanami > OProfile not sure if that will take care of me or not. If > anyone has any insight to this please fill me in. We have > free reign to do whatever to these servers to make them work. *********************************************** This e-mail and its attachments are confidential and are intended for the above named recipient only. If this has come to you in error, please notify the sender immediately and delete this e-mail from your system. You must take no action based on this, nor must you copy or disclose it or any part of its contents to any person or organisation. Statements and opinions contained in this email may not necessarily represent those of Littlewoods. Please note that e-mail communications may be monitored. The registered office of Littlewoods Limited and its subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB. Registered number of Littlewoods Limited is 262152. ************************************************ ******************************************************** This Weeks Sponsor Pearl Software Internet Monitoring, Filtering, and Control Solutions Enabling User & Group Level Oversight & Access Policies Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. For more information on a proactive email security service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________ ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. For more information on a proactive email security service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________ ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. For more information on a proactive email security service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________ ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. For more information on a proactive email security service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________ ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. For more information on a proactive email security service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________