From: David Mathog on
Marc Cain wrote:
> When the following local GPO is left in its default setting Samba
domain logons are delayed for 30 seconds: "Computer
Configuration\Administrative Templates\System\User Profiles\Set maximum
wait time for the network if the user has a roaming user profile or
remote home directory."

Changed this (set to 0) and it knocked the logon time down to 22
seconds. Checked the netlogon and wireshark logs and the 30 second gap
was gone. However, the 15 second gap is still present, as are the
corresponding ICMP pings from the client to the server. Have to modify
the server's firewall rules to allow icmp ping from the client unless
somebody knows where the registry key is that controls those pings.

Regards,

David Mathog
mathog(a)caltech.edu
Manager, Sequence Analysis Facility, Biology Division, Caltech

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: David Mathog on
> However, the 15 second gap is still present, as are the
> corresponding ICMP pings from the client to the server. Have to modify
> the server's firewall rules to allow icmp ping from the client unless
> somebody knows where the registry key is that controls those pings.

Found it!
Domain login in 8 seconds!!!
One must enable "Do not detect slow network connections". The method it
uses to do that is to PING the server. Not poke at one of the server
ports which should be open on the firewall, mind you, but do a regular
ICMP ping, which is of course blocked on 99.99% of all linux servers.

The W7 client is currently set as follows;

1. hosts entry for the samba server (probably not important)
2. Do net detect slow network connections. (Eliminates the 15s gap).
3. Set max wait time for the network if the user has ... (Eliminates
the 30s gap)
4. Do not check for user ownership of roaming profiles (possibly not
relevant).

Thanks to everybody who helped with this!

David Mathog
mathog(a)caltech.edu
Manager, Sequence Analysis Facility, Biology Division, Caltech
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba