none
Direct Access Clients experiencing slow logon RRS feed

  • Question

  • We have a number of Windows 7 Enterprise clients who when logging onto their Laptops whilst connected to Direct Access are experiencing slow logon times of up to 5 mins. This was previously even longer until we excluded certain folders from being copied during logon / logoff. We have enabled the group policy settings to detect slow links and therefore not download the server copy of a roaming profile, which works fine when on the internal network at a branch office, however when connected at home or another location over direct access the entire profile (minus excluded and redirected folders) is downloaded.

    My question is why does the user profile slow link detection not work when laptops are connected over direct access? Or if it does work are there specific settings that need to be applied with relation to direct access?

    On reading previous articles relating to windowsn 2000 and xp part of the detection routine for slow links uses a ping with a size of 2048 and with the ip df header set, when doing the same commands from a windows 7 comand prompt e.g.  "ping -f -l 2048 servername" the command will only set the df header when using ipv4 pings which means the result is always 0 when on direct access, does this mean that slow link detection for user profiles is fundamentally broken in ipv6 environments? 

    Thanks in advance for any help or light people can shed on this.

    Tuesday, October 12, 2010 1:28 PM

Answers

  • Hey guys,

    I found the info and need to organize it - will send ASAP.

    Thanks!

    Tom


    MS ISDUA/UAG DA Anywhere Access Team Get yourself some Test Lab Guides! http://blogs.technet.com/b/tomshinder/archive/2010/07/30/test-lab-guides-lead-the-way-to-solution-mastery.aspx
    • Marked as answer by Erez Benari Monday, October 25, 2010 10:33 PM
    Wednesday, October 13, 2010 10:06 PM
    Moderator

All replies

  • Hi Justin,

    I believe there are some Group Policy settings available that can help with this. This was something that I had set for my blog but it got lost in the "pile".

    Send me a note at tomsh@microsoft.com and I can get that information to you before I get the blog post up.

    Thanks!

    Tom


    MS ISDUA/UAG DA Anywhere Access Team Get yourself some Test Lab Guides! http://blogs.technet.com/b/tomshinder/archive/2010/07/30/test-lab-guides-lead-the-way-to-solution-mastery.aspx
    Tuesday, October 12, 2010 1:32 PM
    Moderator
  • Me too please Tom...
    Jason Jones | Forefront MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk
    Tuesday, October 12, 2010 10:55 PM
    Moderator
  • Hey guys,

    I found the info and need to organize it - will send ASAP.

    Thanks!

    Tom


    MS ISDUA/UAG DA Anywhere Access Team Get yourself some Test Lab Guides! http://blogs.technet.com/b/tomshinder/archive/2010/07/30/test-lab-guides-lead-the-way-to-solution-mastery.aspx
    • Marked as answer by Erez Benari Monday, October 25, 2010 10:33 PM
    Wednesday, October 13, 2010 10:06 PM
    Moderator
  • Tom,

     

    Did you manage to find a solution for this? We are suffering with exactly the same issue (with users now complaining about log in times) - any assistance would be appreciated.

     

    Thanks and regards,

     

    Kelvin

    Tuesday, October 19, 2010 8:58 PM
  • Hi Tom

    We have similar problems with DA.

    Did you made the blog post already?

    Thank you

    J0fe

    Friday, October 22, 2010 7:26 AM
  • Soon, Tom will be publishing more info about this, though we don't have an exact ETA yet. I'll post an update here when I have it.
    Ben Ari
    Microsoft CSS UAG/IAG Support
    Sammamish, WA
    Monday, October 25, 2010 10:50 PM
  • Tom / Ben,

     

    Has there been any progress on this? A few months on and we are getting hammered by our users on this (with discussions on whether to pull the plug and revert to a 'proper' VPN).

    Regards,

    Kelvin

    Sunday, December 5, 2010 9:56 PM
  • Unfortunately I've not had any answer as yet . . . our client is getting to the point whereby they're considering returning to a vpn solution too.
    Monday, December 6, 2010 9:04 AM
  • Hi Justin,

    Sorry this got lost in the shuffle. Let me find that information and see what I can get up today.

    Thanks!

    Tom


    MS ISDUA/UAG DA Anywhere Access Team Get yourself some Test Lab Guides! http://blogs.technet.com/b/tomshinder/archive/2010/07/30/test-lab-guides-lead-the-way-to-solution-mastery.aspx
    Friday, December 10, 2010 5:25 PM
    Moderator
  • Unfortunately I've not had any answer as yet . . . our client is getting to the point whereby they're considering returning to a vpn solution too.

    The best published documentation we have is a best practices guide. It talks about the 35ms latency threshold as the recommended configuration for slow-link (page 54). That guide is available at: http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d8541618-5c63-4c4d-a0fd-d942cd3d2ec6

     

    Let me know if this relates to your issue.

    Thanks!

    Tom


    MS ISDUA/UAG DA Anywhere Access Team Get yourself some Test Lab Guides! http://blogs.technet.com/b/tomshinder/archive/2010/07/30/test-lab-guides-lead-the-way-to-solution-mastery.aspx
    Friday, December 10, 2010 5:42 PM
    Moderator
  • Thanks for the white paper, unfortunately all of the slow link detection information within the paper is related to offline files for redirected folders and not to user profiles themselves. We already have redirected folders working offline as expected, however because the logon process doesn't detect a slow link when connected to DA it attempts to download the entire profile rather than use the locally stored copy. Within XP and looking at Group Policy, profile and offline files slow link detection are setup in different areas of GP, and it is the profile specific detection that is failing and leading a slow logon times.

    Regards

    Justin

    Monday, December 13, 2010 3:48 PM
  • Hi Justin,

    OK, got it. I'm following up to see if there's anything else we can do. Stay tuned.

    Tom


    MS ISDUA/UAG DA Anywhere Access Team Get yourself some Test Lab Guides! http://blogs.technet.com/b/tomshinder/archive/2010/07/30/test-lab-guides-lead-the-way-to-solution-mastery.aspx
    Monday, December 13, 2010 4:21 PM
    Moderator
  • Any updates on this?  We're experiencing the exact same problem.
    Wednesday, March 16, 2011 7:50 PM
  • Hi P,

    Is your problem related to slow profile updates?

    Thanks!

    Tom


    MS ISDUA/UAG DA Anywhere Access Team Get yourself some Test Lab Guides! http://blogs.technet.com/b/tomshinder/archive/2010/07/30/test-lab-guides-lead-the-way-to-solution-mastery.aspx
    Monday, March 21, 2011 3:34 PM
    Moderator
  • Any updates on this problem as we are seeing the same issues with users seeing 40min + logons over DA.

     

    Thanks

    Lee

    Thursday, May 26, 2011 7:30 PM
  • Hi Lee,

    Check out:

    http://technet.microsoft.com/en-us/library/ee382285(WS.10).aspx

    Using roaming user profiles for DirectAccess clients for all of the contents of the user profile folder can result in long logon and logoff times. If you want to store user profiles on network locations for DirectAccess clients, use folder redirection for the folders of the user profile rather than roaming user profiles for the entire user profile.

    HTH, Tom


    MS ISDUA/UAG DA Anywhere Access Team Get yourself some Test Lab Guides! http://blogs.technet.com/b/tomshinder/archive/2010/07/30/test-lab-guides-lead-the-way-to-solution-mastery.aspx
    Friday, June 17, 2011 11:13 PM
    Moderator