Slow performance from Domain Controller

good morning,

i'm having problem on 1 of our domain controllers in forest.  there no errors in log.  issue if try add new user, takes 10 seconds pop box add user , same thing trying add user group.  it's on first domain controller in forest.

my setup

root domain

dc1-windows server 2008 r2 (forest level 2003)-problem child

dc2-windows server 2008 r2

child domain

dc1-windows server 2008 r2 (forest level 2003

dc2-windows server 2008 r2

old domain trusted bi-directional child domain

dc1-windows server 2003 (forest level 2003)

dc2-windows server 2003

i don't have problems can see in application/system/dns logs.  here something.  created 2 test dc's test upgrading forest level behind scenes.  built 2 vm's , promoted them dc's.  cut off network adapters outside , had test vm(windows 7) test upgrading forest level without hits network.  trashed these machines.  deleting entries out of dns, , sites , services.  there else missing? 

any commands point me in right direction?  don't understand why second dc on root domain work fine first 1 slow.  if dns wouldn't slow performance issue on both? 

any apperciated,

tim

there multiple reasons slow performance dns misconfig,nic binding issue,server performance bottleneck,etc.

ensure following dns setting on dc:
1. each dc / dns server points private ip address primary dns server , other remote/local dns servers secondary in tcp/ip properties.
2. each dc has 1 ip address , single network adapter enabled.
3. contact isp , valid dns ips them , add in forwarders, not set public dns server in tcp/ip setting of dc.
4.make sure ipv6 configured dynamic (automatically).
5. once done, run "ipconfig /flushdns & ipconfig /registerdns", restart dns , netlogon service each dc.
not put private dns ip addresses in forwarder list.
6.assigning static ip address dc if ip address assigned dhcp server dc.it not recommended.

--check nic binding the nic online , has ip details should in first order.if multiple nic present disabled unrequired nic.http://theregime.wordpress.com/2008/03/04/how-to-setview-the-nic-bind-order-in-windows/

--also, disable local windows firewall service, default enabled in vista/windows 2008 , above.
disable windows firewall: http://technet.microsoft.com/en-us/library/cc766337(ws.10).aspx

--installed latest sp , hotfix on server if not installed.exclude sysvol,ntds/ntfrs folder av scan.

--run hardware diagnosis to check health of server,you can contact h/w vendor same.

if still issue persist post ipconfig /all,dcdiag /q , repadmin /replsum output check health of problematic dc.

hope helps

---

best regards,

sandesh dubey.

mcse|mcsa:messaging|mcts|mcitp:enterprise adminitrator | blog

disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights.

Windows Server  >  Directory Services