[Samba] Windows 7 domain logon timeouts was Re: Domain login delays w2k8 R2

[Cain, Marc]

Samba 3.4.3 (ldap backend)
Windows 7 Enterprise

I've experienced the identical symptoms with Windows 7 ENT and found this workaround.

When the following local GPO is left in its default setting Samba domain logons are delayed for 30 seconds: "Computer Configuration\Administrative Templates\System\User Profiles\Set maximum wait time for the network if the user has a roaming user profile or remote home directory."  

Enable this and set the value to 0 to work around this timeout.  The timeout does not occur when logging into an Active Directory PDC running Server 2008 R2.  I have not tested this with w2k8 R2 client.

In addition, if the user's desktop is set to a solid background color logons of any kind (local, AD, samba) will be delayed by 30 seconds.  Set the background to any .jpg image or apply Microsoft's hotfix to work around this issue.  This is a cumulative timeout; that is, if the above timeout is in affect and the solid background color timeout is also in affect the delay is 60 seconds.

I also experienced a 30 second timeout when I set the local GPO to "Run logon scripts synchronously".  This problem has inexplicably vanished and I can't replicate it though I don't see it listed in any Windows 7 updates.  Might have been happening to me with Windows 7 PRO.  I'll check that if anyone is interested.  The fix was to apply an old Vista reg setting.  Can be Googled as "Vista Run logon scripts synchronously".

Marc Cain

On Feb 4, 2010, at 3:33 AM, Åke Holmlund wrote:

> Not much. I attached a screendump from Wireshark. This capture is made
> on the w2k8 machine. The traffic shown is sent to/from the ethernet
> address of the w2k8 machine. Remote Desktop traffic is excluded
> (the machine is used as a terminal server).
> 
> Regards,
> Åke Holmlund
> 
> --On 3 februari 2010 14.08.49 -0800 Jeremy Allison <jra at samba.org> wrote:
> 
>> On Wed, Feb 03, 2010 at 03:19:36PM +0100, Åke Holmlund wrote:
>>> Hello!
>>> 
>>> From what I can see, there is no DNS-traffic around the time of the
>>> gaps and the DNS-activity I can see in onther places seems ok. There
>>> is almost no network traffic and no CPU activity during the gaps so
>>> it looks like some kind of timeout issue.
>>> 
>>> It may be of interest that, for the moment, IPv6 is beeing used.
>>> Sometimes we also have quite a long delay if we click on the "View
>>> computers and devices" link in the "Network and Sharing Center".
>> 
>> Is there any other traffic coming out of the client box around the delay
>> time ?
>> 
>> Jeremy.
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba