I decided to sign up for this forum to post this bit of information. I spent about a week troubleshooting this from many angles to find the answer and wanted to share it as some of the troubleshooting tips I got was from this forum thread779-1263393
I built a Server 2003 AD Network parallel a Netware 6.5 Network and then moved everything and everyone except for Groupwise 7 Email Cluster (that remains on Novell). Everything worked once I made the switch over, with the only problem being some slow issues on the network. DNS had slow resolution times if you Clicked on Start/RUN/and \\servername\. It would take some time for it to populate the shares. My Logon VBS to map shares and printers would take longer than expected to finish executing, and when I would try to access a mapped drive it would take 10-20 seconds of waiting until I could get into the drive. Once accessed the rest of the drives mapped to that server could be accessed quickly, but after about 10 minutes of inactivity you would have to wait the 10-20 seconds again for the first access.
Some network info is that my File/Print server is a PowerVault NF500 NAS with 4G RAM, Gigabit Ethernet, 2 Quad Core 2GHz Xeon Processors and SAS drives. I have a fully Gigabit Network. All clients are XP Pro SP3. I should not have these wait times.
At first I thought the issue was DNS and spent lots of time troubleshooting DNS and could not find anything wrong with it. Then I tried deleting everything from "My Network Places", moved "Microsoft Windows Network" to the top of the "Preferred Order for Network Providers", and Changed the "Name Resolution" and "Wait B/F giving up on DA" timeouts in the Novell Client to 1 second. None of these things helped.
At one point during troubleshooting I cleared all Event Logs from my Backup DC and rebooted. I then checked the logs to find under Application an Error Event for Auto Enrollment stating: "Automatic Certificate Enrollment for local system failed to enroll for one Domain Controller Certificate (0x80070005). Access Denied." I found an article on line stating that all Domain Controllers should be a member of the "CERTSVC_DCOM_ACCESS Group". I proceeded to add the "Domain Controllers" Group as a Member and rebooted to find a successful Auto Enrollment Event.
This fixed every network problem I was having. My DNS resolution through Start/RUN/ \\servername\ is super quick, my logon scripts run so fast I noticed on my "My Computer" tool bar it mapped the first drive b/f it even draws the icon for "Control Pannel", and there's no more wait for Mapped Drives at all.
I hope this helps someone!
I built a Server 2003 AD Network parallel a Netware 6.5 Network and then moved everything and everyone except for Groupwise 7 Email Cluster (that remains on Novell). Everything worked once I made the switch over, with the only problem being some slow issues on the network. DNS had slow resolution times if you Clicked on Start/RUN/and \\servername\. It would take some time for it to populate the shares. My Logon VBS to map shares and printers would take longer than expected to finish executing, and when I would try to access a mapped drive it would take 10-20 seconds of waiting until I could get into the drive. Once accessed the rest of the drives mapped to that server could be accessed quickly, but after about 10 minutes of inactivity you would have to wait the 10-20 seconds again for the first access.
Some network info is that my File/Print server is a PowerVault NF500 NAS with 4G RAM, Gigabit Ethernet, 2 Quad Core 2GHz Xeon Processors and SAS drives. I have a fully Gigabit Network. All clients are XP Pro SP3. I should not have these wait times.
At first I thought the issue was DNS and spent lots of time troubleshooting DNS and could not find anything wrong with it. Then I tried deleting everything from "My Network Places", moved "Microsoft Windows Network" to the top of the "Preferred Order for Network Providers", and Changed the "Name Resolution" and "Wait B/F giving up on DA" timeouts in the Novell Client to 1 second. None of these things helped.
At one point during troubleshooting I cleared all Event Logs from my Backup DC and rebooted. I then checked the logs to find under Application an Error Event for Auto Enrollment stating: "Automatic Certificate Enrollment for local system failed to enroll for one Domain Controller Certificate (0x80070005). Access Denied." I found an article on line stating that all Domain Controllers should be a member of the "CERTSVC_DCOM_ACCESS Group". I proceeded to add the "Domain Controllers" Group as a Member and rebooted to find a successful Auto Enrollment Event.
This fixed every network problem I was having. My DNS resolution through Start/RUN/ \\servername\ is super quick, my logon scripts run so fast I noticed on my "My Computer" tool bar it mapped the first drive b/f it even draws the icon for "Control Pannel", and there's no more wait for Mapped Drives at all.
I hope this helps someone!