Page 1 of 1 1
Topic Options
#139090 - 2005-05-03 06:21 PM Slow logon over RAS and VPN connections
Chip G Offline
Fresh Scripter

Registered: 2002-11-15
Posts: 13
Loc: Owings Mills, MD
Hello. I am using KiXtart for my company's logon script. For the majority of users, who are attached to our network at 10Mb/Full Duplex or 100Mb/Full Duplex, the script runs very quickly and efficiently. Howerver, we have a number of users who either 1) dial into the network over a 56Kbs modem, or 2) remote into the network via VPN. For these users, it may take up to 15 minutes to complete the logon script.

Through testing and trace analysis, there appears to be two delays. The first occurs at logon time, and my suspicions are that it takes some time for the kix32.exe to be downloaded into memory to run. The second delay occurs when an ingroup() function queries for the user's domain groups. This can take anywhere from 5-7 minutes to complete. We are using the "/f" commandline option to refresh the group membership cache every logon time. Would removing this help? Any suggestions on reducing the time it is taking for logon to complete would be helpful. Thanks in advance.

Top
#139091 - 2005-05-03 06:52 PM Re: Slow logon over RAS and VPN connections
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
Consider hosting KiX32.exe locally on the PC and yes, remove the /F.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#139092 - 2005-05-03 08:25 PM Re: Slow logon over RAS and VPN connections
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
Even though it is more difficult to manage the KiX version it should be much quicker if you copy and run KiX32.exe or WKiX32.exe from the local workstation and then run the script from the NETLOGON folder. Removal of the /F switch would increase speed at the cost of an InGroup call maybe not detecting the users credentials in the group because they had been added to the group less then 30 days ago by default. You could also specify how many days to refresh the cache - 30 days is the default.

If you really don't have to run some code for remote users you could also copy a file and time it to determine their connection speed and then take action based upon those results.

Top
#139093 - 2005-05-03 09:08 PM Re: Slow logon over RAS and VPN connections
Chip G Offline
Fresh Scripter

Registered: 2002-11-15
Posts: 13
Loc: Owings Mills, MD
This is what I suspected and I will probably be going that route. I appreciate the quick response!
Top
#139094 - 2005-05-03 11:15 PM Re: Slow logon over RAS and VPN connections
Howard Bullock Offline
KiX Supporter
*****

Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
I cache both Kix32.exe and the scripts locally on the computers and use a CRC32 check to determine if they need to be recopied before executing them. This saves the time of D/L the scripts before execution can begin.
_________________________
Home page: http://www.kixhelp.com/hb/

Top
#139095 - 2005-05-04 02:11 AM Re: Slow logon over RAS and VPN connections
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
I'd also create a slimmed down script containing only the necessary components for remote login. First detect the remote login, e.g. via IP address check, then branch into the sub-scripts.
_________________________
There are two types of vessels, submarines and targets.

Top
#139096 - 2005-05-04 09:48 PM Re: Slow logon over RAS and VPN connections
Chip G Offline
Fresh Scripter

Registered: 2002-11-15
Posts: 13
Loc: Owings Mills, MD
Currently, I am using a packaged executable file of the script via KiXscripts Editor. Would you break it out into a local Kix32.exe and a .kix file on the domain netlogon share?
Additionally, what if I need to cache domain group info more often than 30 days? Through some testing, a vbs script responded with group information in 18-20 seconds. The KiX script can take less time (anywhere from 8 to 13 seconds), but it can also take much longer (over three minutes in one case). I suspect that it is the network server that is causing this latency, but why would the KiX script be so inconsistent? Is it because it's requesting from a particular domain controller, whereas the vbs script is querying the AD?

Here's the vbs:
domain = "mydomain.net"
Set nuser = wscript.CreateObject("Wscript.network")
username = nuser.username
Set oUsr = getobject("WinNT://" & domain & "/" & username & ",user")
Set Grp = oUsr.Groups
GrpID = oUsr.PrimaryGroupID

For Each Item In Grp
NT4Name = replace(Item.ADsPath,"WinNT://","")
tempArray = Split(nt4Name,"/")
NT4Name = tempArray(1)
QueryFilter = QueryFilter & NT4Name & ", "
Next
wscript.echo QueryFilter

Here's the KiX (running "kix32.exe script.kix /f")
? "Retrieving domain group information."
If(InGroup("Domain Users"))
? "Group membership has been cached."
EndIf

Times were:
vbs- :38, :18, :18, :18, :17, :17, :20
kix- 3:32, :48, :13, :13, :13, :13, 1:41

Thanks.

Top
#139097 - 2005-05-14 01:13 AM Re: Slow logon over RAS and VPN connections
Chip G Offline
Fresh Scripter

Registered: 2002-11-15
Posts: 13
Loc: Owings Mills, MD
Anyone? Anyone? Bueller?
Top
#139098 - 2005-05-15 07:00 PM Re: Slow logon over RAS and VPN connections
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
You will need to test this in an isolated environment whit clearly defined network traffic, otherwise use a network sniffer to find where the latency is.
_________________________
There are two types of vessels, submarines and targets.

Top
#139099 - 2005-05-18 12:18 AM Re: Slow logon over RAS and VPN connections
masken Offline
MM club member
*****

Registered: 2000-11-27
Posts: 1222
Loc: Gothenburg, Sweden
One of the most common factors in these types of problems is name resolution. How are your VPN and dial-in users handled IP-addresses, and what DNS-options is there in these DHCP scopes? If you're on an AD-domain, the DNS options should ONLY point towards your AD-DNS.
_________________________
The tart is out there

Top
Page 1 of 1 1


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 1452 anonymous users online.
Newest Members
Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.065 seconds in which 0.029 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org