Group Policy Slow at Remote Site 1

[danielwestendorf]

Hi there,

Have two sites, connected by a slow but stable site-to-site VPN. Each site has two Domain Controllers. The Main site, which holds all of the Active Directory FSMO/OM roles is fine and works great. The remote site, which has two DC's, experiences very slow client logins, particularly when applying GP. When using the Group Policy editor on either of the DC's in the remote site, actions/loading takes a long time. Using the Group Policy editor at the Main site is snappy.

I'm guessing, but may be wrong, that GP is being served over the wire from the main site. I'm not sure why this is happening.

The DC's at the remote site are pointing to themselves for DNS. Running the SET command on both clients and DC's at the remote site respond with one of the remote DC's as the Logon server. All DC's are Server 2008 R2, clients are Windows 7. Nothing of note in the Event logs, Replication seems to be fine.

I'm at a loss as what may be happening here. Does anyone have any suggestions as where to look? Any other information I can provide to look into this?

Thanks,

Daniel

 

[TechyMcSe2k]

Are you pushing anything out through GPO? Like an MSI file that is on a share back at the main office? It sounds like something in the actually GPO referencing something that resides back at the main office. Check each GPO and see what each one is doing

http://www.samtechconsulting.com

_______________________________________
Great knowledge can be obtained by mastering the Google algorithm.

 

[baddos]

Do you have a site setup in Active Directory Sites and Services for this remote site with it's IP subnet and domain controllers defined?

 

[technome]

Not having a Global Catalogue server at remote site will slow login.

http://support.microsoft.com/kb/241789

........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm

 

[danielwestendorf]

Thanks for the replies and ideas.

All DC's are GC servers. Sites are set up, and the DC's are assigned to their sites.

There are no resources being pulled. The only only GPO I have set up currently changes some power and display settings. Even if there were resources being pulled, it wouldn't explain why the GP MC is slow to open and load.

Any other suggestions?

Thanks,

Daniel

 

[TechyMcSe2k]

when you open the GPMC at the remote site DC is it using the local DC or is it using the Operation MAster by default. Try changing it to the local DC and see if response speeds up.

http://technet.microsoft.com/en-us/library/cc759770(WS.10).aspx

http://www.samtechconsulting.com

_______________________________________
Great knowledge can be obtained by mastering the Google algorithm.

 

[TechyMcSe2k]

I would also reference the 2008 GPO Deployment Guide, just in case there was something missed.

http://www.microsoft.com/downloads/...68-0aea-450a-861b-e2c5413b0485&DisplayLang=en

http://www.samtechconsulting.com

_______________________________________
Great knowledge can be obtained by mastering the Google algorithm.

 

[danielwestendorf]

Thanks TechyMcSe2k! It was pointing at the Operation Master by default. Changing it to Any Domain Controller sped things up!