Re: Applying Security Policy Takes Forever

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/30/04


Date: Wed, 30 Jun 2004 00:35:02 GMT

Also check it's dns configuration and make sure that it points to ONLY AD domain
controllers running dns for the domain and never an ISP dns server. Try to ping the
dns server by IP and name and use nslookup to verify correct operation. Also run
netdiag on it looking for any failed tests/errors/fatal warnings that may indicate a
problem with locating the domain controller or it's secure channel/computer account.
Don't rule out a flaky nic/cable/port. --- Steve

"Ben Blackmore" <bjblackmore@nospam.hotmail.com> wrote in message
news:uX%238m$eXEHA.1048@tk2msftngp13.phx.gbl...
> Hi,
>
> I have a PC that has suddenly developed a problem. For some reason it now
> takes 2mins 30seconds to apply the domain security policy, compared to last
> week when it only took about 30 seconds.
> The machine is a clone of 5 other machies which are all in the same office,
> and are pretty much used just for label printing. The other machines all
> apply their security policies in under 1 min. The only thing I can think
> that has changed is the SUS Updates ran yesterday, however I don't think
> there were any updates installed on this particular machine.
> The spec is a HP e-pc (small form factor) P766, 128mb ram, 10gb disk,
> integrated intel 810 video, integrated 3com 905c-tx. The users logon with
> different usernames, however they all use the same profile.
>
> I have re-installed SP4, and checked the event viewer, which had nothing out
> of the ordinary. I am just about to enable logging for security
> configuration client processing.
>
> Anyone have any suggestions as to what might be causing this?
>
> Cheers
>
> Ben
>
>



Relevant Pages

  • Re: Cannot Access AD During a Re-run of Domainprep
    ... Did you change the DNS configuration after removing the first DC. ... first DC is also a DNS server. ... I have App log errors every 5 minutes. ... > an error that it could not access AD nor could it find the Schema Master ...
    (microsoft.public.exchange2000.admin)
  • Re: Applying Security Policy Takes Forever
    ... Also check it's dns configuration and make sure that it points to ONLY AD domain ... controllers running dns for the domain and never an ISP dns server. ... dns server by IP and name and use nslookup to verify correct operation. ... > that has changed is the SUS Updates ran yesterday, ...
    (microsoft.public.win2000.group_policy)
  • Re: ID 1000
    ... I have already recreated sysvol directory for NTFRS. ... Then check your DNS configuration, in a single domain all servers and clients should only point to the local DNS server from your domain and if you go to internet, your DNS server should have configured a forwarder. ... new domain controller group policy ...
    (microsoft.public.win2000.group_policy)
  • Re: Loging in to a domain
    ... Most likely a DNS configuration issue. ... using only the AD DNS server for name resolution, ... "Cameron Dockstader" wrote in message ... I've just setup a 2003 server, and installed and configured the main domain ...
    (microsoft.public.windowsxp.network_web)