From: Luca on
Hi,
we have 3 servers
1) p4 3000, 3 gb ram, single sata hd, domain controller(dhcp /dns) server
2003 r2 sp2
2) dual cpu xeon quad core, 16 gb ram, 3 disks sas 15k raid 5, terminal
server 2003 r2 sp2
3)single cpu xeon dual core, 4 gb ram, 3 disks scsi 10k raid 5, terminal
server 2003 sp2

we implement gpo rules for roaming profile with documents, desktop
redirection. Also when the user log off we implement the temporary profile
clearing.

We have some problems cause this is a school and every hour about 30 users
logoff and logon in the same time. The first ten logon quickly then the
others must wait till 5 minutes or more after they put their own password.
There's no difference if they access the most performance terminal or the
other.

There are not particular load in the servers ram, but after 50 users logon
the next results in very slow logon.

I read about using flex profile kit to improve instead gpo, but I don't find
where to download them.

Any suggestion?

Thanks Luca
From: Vera Noest [MVP] on
I believe that the TS thinks that it is under attack when you have
a high amount of logons in a short time period, and you can modify
that parameter, but I don't remember the details.
There should be an EventID 1006, Source TermService in the EventLog
on the server when this happens.
Searching the web I've found this solution, but I've never tried it
myself.
Backup you registry before applying it.

-----------------------------------------------
1. Start Registry Editor.
2. Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServer
3. On the Edit menu, click Add Value, and then add the following
registry value if the registry value does not exist.
Value name Data type MaxOutstandingConnect DWORD

Note: The registry value should be set to the appropriate threshold
to achieve the required connection detection. For example, if 50
connections are required, set the value to 32 in hexadecimal
format.
--------------------------------------------------

Please let us know here if this solves your problem!
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

=?Utf-8?B?THVjYQ==?= <Luca(a)discussions.microsoft.com> wrote on 06
feb 2009:

> Hi,
> we have 3 servers
> 1) p4 3000, 3 gb ram, single sata hd, domain controller(dhcp
> /dns) server 2003 r2 sp2
> 2) dual cpu xeon quad core, 16 gb ram, 3 disks sas 15k raid 5,
> terminal server 2003 r2 sp2
> 3)single cpu xeon dual core, 4 gb ram, 3 disks scsi 10k raid 5,
> terminal server 2003 sp2
>
> we implement gpo rules for roaming profile with documents,
> desktop redirection. Also when the user log off we implement the
> temporary profile clearing.
>
> We have some problems cause this is a school and every hour
> about 30 users logoff and logon in the same time. The first ten
> logon quickly then the others must wait till 5 minutes or more
> after they put their own password. There's no difference if they
> access the most performance terminal or the other.
>
> There are not particular load in the servers ram, but after 50
> users logon the next results in very slow logon.
>
> I read about using flex profile kit to improve instead gpo, but
> I don't find where to download them.
>
> Any suggestion?
>
> Thanks Luca
From: Luca on
We have not id event 1006.
I've to try your solution too?
How can I send you the registry, which mail can I use?

We think the problem could be in the gpo folder redirection, today we try to
change the domain controller server whith a new one more performant.

What you think about it?
Thanks

Luca

"Vera Noest [MVP]" wrote:

> I believe that the TS thinks that it is under attack when you have
> a high amount of logons in a short time period, and you can modify
> that parameter, but I don't remember the details.
> There should be an EventID 1006, Source TermService in the EventLog
> on the server when this happens.
> Searching the web I've found this solution, but I've never tried it
> myself.
> Backup you registry before applying it.
>
> -----------------------------------------------
> 1. Start Registry Editor.
> 2. Locate and then click the following registry subkey:
> HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServer
> 3. On the Edit menu, click Add Value, and then add the following
> registry value if the registry value does not exist.
> Value name Data type MaxOutstandingConnect DWORD
>
> Note: The registry value should be set to the appropriate threshold
> to achieve the required connection detection. For example, if 50
> connections are required, set the value to 32 in hexadecimal
> format.
> --------------------------------------------------
>
> Please let us know here if this solves your problem!
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> *----------- Please reply in newsgroup -------------*
>
> =?Utf-8?B?THVjYQ==?= <Luca(a)discussions.microsoft.com> wrote on 06
> feb 2009:
>
> > Hi,
> > we have 3 servers
> > 1) p4 3000, 3 gb ram, single sata hd, domain controller(dhcp
> > /dns) server 2003 r2 sp2
> > 2) dual cpu xeon quad core, 16 gb ram, 3 disks sas 15k raid 5,
> > terminal server 2003 r2 sp2
> > 3)single cpu xeon dual core, 4 gb ram, 3 disks scsi 10k raid 5,
> > terminal server 2003 sp2
> >
> > we implement gpo rules for roaming profile with documents,
> > desktop redirection. Also when the user log off we implement the
> > temporary profile clearing.
> >
> > We have some problems cause this is a school and every hour
> > about 30 users logoff and logon in the same time. The first ten
> > logon quickly then the others must wait till 5 minutes or more
> > after they put their own password. There's no difference if they
> > access the most performance terminal or the other.
> >
> > There are not particular load in the servers ram, but after 50
> > users logon the next results in very slow logon.
> >
> > I read about using flex profile kit to improve instead gpo, but
> > I don't find where to download them.
> >
> > Any suggestion?
> >
> > Thanks Luca
>
From: Vera Noest [MVP] on
OK, if you don't see eventid 1006, then that's not the problem and
you shouldn't apply the registry change that I mentioned.
And there are no other warnings or errors in the EventLog?

No, do not send me anything privately, that's not how newsgroups
work. All communication is performed here (and why would you want
to shut out possible help from the rest of the world?)

When did this problem start to occur? Did it coincide with your GPO
which uses folder redirection?
I understand that the logon itself (authentication and verification
by username and password) is *not* slow, but it takes a long time
before the users get to their desktop, is that correct?
Do they get any messages in the meantime (like: Windows is loading
your profile, or something like that)?

To troubleshoot this, turn on verbose logging of the user
environment:

221833 - How to enable user environment debug logging in retail
builds of Windows
http://support.microsoft.com/?kbid=221833

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

=?Utf-8?B?THVjYQ==?= <Luca(a)discussions.microsoft.com> wrote on 09
feb 2009:

> We have not id event 1006.
> I've to try your solution too?
> How can I send you the registry, which mail can I use?
>
> We think the problem could be in the gpo folder redirection,
> today we try to change the domain controller server whith a new
> one more performant.
>
> What you think about it?
> Thanks
>
> Luca
>
> "Vera Noest [MVP]" wrote:
>
>> I believe that the TS thinks that it is under attack when you
>> have a high amount of logons in a short time period, and you
>> can modify that parameter, but I don't remember the details.
>> There should be an EventID 1006, Source TermService in the
>> EventLog on the server when this happens.
>> Searching the web I've found this solution, but I've never
>> tried it myself.
>> Backup you registry before applying it.
>>
>> -----------------------------------------------
>> 1. Start Registry Editor.
>> 2. Locate and then click the following registry subkey:
>> HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServ
>> er 3. On the Edit menu, click Add Value, and then add the
>> following registry value if the registry value does not exist.
>> Value name Data type MaxOutstandingConnect DWORD
>>
>> Note: The registry value should be set to the appropriate
>> threshold to achieve the required connection detection. For
>> example, if 50 connections are required, set the value to 32 in
>> hexadecimal format.
>> --------------------------------------------------
>>
>> Please let us know here if this solves your problem!
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> *----------- Please reply in newsgroup -------------*
>>
>> =?Utf-8?B?THVjYQ==?= <Luca(a)discussions.microsoft.com> wrote on
>> 06 feb 2009:
>>
>> > Hi,
>> > we have 3 servers
>> > 1) p4 3000, 3 gb ram, single sata hd, domain controller(dhcp
>> > /dns) server 2003 r2 sp2
>> > 2) dual cpu xeon quad core, 16 gb ram, 3 disks sas 15k raid
>> > 5, terminal server 2003 r2 sp2
>> > 3)single cpu xeon dual core, 4 gb ram, 3 disks scsi 10k raid
>> > 5, terminal server 2003 sp2
>> >
>> > we implement gpo rules for roaming profile with documents,
>> > desktop redirection. Also when the user log off we implement
>> > the temporary profile clearing.
>> >
>> > We have some problems cause this is a school and every hour
>> > about 30 users logoff and logon in the same time. The first
>> > ten logon quickly then the others must wait till 5 minutes or
>> > more after they put their own password. There's no difference
>> > if they access the most performance terminal or the other.
>> >
>> > There are not particular load in the servers ram, but after
>> > 50 users logon the next results in very slow logon.
>> >
>> > I read about using flex profile kit to improve instead gpo,
>> > but I don't find where to download them.
>> >
>> > Any suggestion?
>> >
>> > Thanks Luca