Performance: Slow logon to AD for some Windows XP desktops
Last Updated:
2012-12-03 05:00:00
Event:
2012-11-20 05:00:00
Status:
Closed
Brief Description:
User Impact:
N/A
Workaround:
There is no workaround for this issue
Current Status:
N/A
Services Affected:
Full Description:
We are receiving reports that some people are experiencing extremely slow logon or logon errors while signing in to Windows XP desktops in cornell.edu domain. Group Policy may fail to process on these desktops as well.
CIT TDX ID:
Timeline of Changes
| Description | Current Status | Date | Time |
|---|---|---|---|
| The issue is resolved. Any individuals who are still seeing slow logon issues are asked to contact the IT Service Desk (255-5500). | The issue is resolved. Any individuals who are still seeing slow logon issues are asked to contact the IT Service Desk (255-5500). | 2012-12-03 | 05:00:00 |
| An issue with UDP packet fragmentation has been identified as the cause of this problem. The networking team is investigating a fix for this issue. | An issue with UDP packet fragmentation has been identified as the cause of this problem. The networking team is investigating a fix for this issue. | 2012-11-20 | 05:00:00 |
| Workaround:\nTo work around this issue, use Kerberos login over TCP (88/tcp). On Windows Vista and newer clients, this is the default setting. This can be changed on Windows XP via a registry key as below:\n\n1. Start Registry Editor.\n2. Locate and then click the following registry subkey:\nHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ Kerberos\Parameters\nNote If the Parameters key does not exist, create it now.\n3. On the Edit menu, point to New, and then click DWORD Value.\n4. Type MaxPacketSize, and then press ENTER.\n5. Double-click MaxPacketSize, type 1 in the Value data box, click to select the Decimal option, and then click OK.\n6. Quit Registry Editor.\n7. Restart your computer.\n\nFor more details about this, please see Microsoft Knowledgebase article at http://support.microsoft.com/kb/244474\n | Workaround:\nTo work around this issue, use Kerberos login over TCP (88/tcp). On Windows Vista and newer clients, this is the default setting. This can be changed on Windows XP via a registry key as below:\n\n1. Start Registry Editor.\n2. Locate and then click the following registry subkey:\nHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ Kerberos\Parameters\nNote If the Parameters key does not exist, create it now.\n3. On the Edit menu, point to New, and then click DWORD Value.\n4. Type MaxPacketSize, and then press ENTER.\n5. Double-click MaxPacketSize, type 1 in the Value data box, click to select the Decimal option, and then click OK.\n6. Quit Registry Editor.\n7. Restart your computer.\n\nFor more details about this, please see Microsoft Knowledgebase article at http://support.microsoft.com/kb/244474\n | 2012-11-20 | 05:00:00 |