[g18c]

Hi, i have pushed Offline files and redirected folders via group policy for our domain. It does work with files (My documents) being
redirected to the network and offline files allowing the users to work away from the network.

However, some users are complaining My Documents is slow to open (first time in the morning and at various points throughout the day),
i.e. they double click on My documents and it will sit there for around 20 seconds, and in some cases upto 2 minutes, before My
Documents open. Opening any network share during this time is no problem (mapped drive in my computer) and that is fast as expected.
The only delay is with the redirected my documents.

Another issue i have is that i get frequent disconnects for offline files, the baloon tip pops up "connection lost to svr001 - You are now Working Offline". i can click to synchronise and it goes straight back up no problem. I know the link is still ok as i can ping the server and infact it is my dns server and i can browse the internet fine.

We are running Windows XP SP2, and Windows 2003 R2 with all updates and latest service pack. The box is running as domain controller, and location for the offline files/redirected folders.

Would apprerciate any help or pointers as the complaints im getting from users is starting to drive me mad! I would like to get the network redirected folders back upto speed.

Many thanks in advance,

Chris

[cluberti]

Do you have Broadcom (or rebranded Broadcom) network cards in that server? If so, run the command "netsh int ip set chimney DISABLED", then install the following hotfix:

http://support.microsoft.com/kb/936594

Again, without a network trace I'm guessing, but it's worth a shot (and if you've got broadcom NICs on 2K3 SP2, you should do this anyway!).

[g18c]

Thanks for the reply.

I did make those changes and rebooted the server, it seemed a little snappier until 30 minutes in my documents started delaying opening for 30 seconds or so.

To give some insight into my setup, im actually running on a DELL PowerEdge 2900 with a XenSource hypervisor. I do this so i can partition the logical machines and it does work well, i run one windows 2003 DC as a virtual machine and one SQL server virtual machine.

I didnt mention this as i dont want to throw a red herring into the works as im pretty sure this isnt a hardware issue as when i get these slow downs with my documents, i can browse normal network shares fine in network neighbourhood, and the transfer speeds are good at 70% utilisation of the link of transfers from the server - imho 70mbps on 100mbps isnt so bad for the windows tcp/ip stack.

Anyway that issue aside, i dont know what else it could be. Maybe because my DC is the same box as the redirected folder location?

Many thanks for your time in posting, if you do have any other ideas please do let me know.

Thanks,

Chris

[cluberti]

If you got a network trace from a client machine where the browsing was slow, it'd be interesting to see the communcations (or lack thereof) between it and the file server.

[fizban2]

download netmon for microsoft downloads, start a trace on a box that is having someissues and record the log, from that we can see where the time out is or why it is lagging.

[nmX.Memnoch]

cluberti, on Dec 16 2007, 02:30 AM, said:

if you've got broadcom NICs on 2K3 SP2, you should do this anyway!

Does this include 2003 SP2 x64?

And being that he has a Dell PowerEdge you can be assured that he either has an Intel or Broadcom NIC. They tend to use Broadcom more these days (unless you specifically order add-in Intel NICs).

[cluberti]

I believe so, yes - if the reg keys exist, then the answer is yes.

[g18c]

Hi chaps, thanks for the replies. Sorry for the late reply i have just managed to get some traces from netmon v3 and there are a whole bunch of errors on there:

13:16:27.164	24.625000	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \CHRISMORLEY\MY DOCUMENTS\MY MUSIC\DESKTOP.INI
13:16:27.164	24.625000	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0000
13:16:27.164	24.625000	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \CHRISMORLEY\MY DOCUMENTS\MY MUSIC\DESKTOP.INI
13:16:27.164	24.625000	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0000
13:16:27.164	24.625000	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query File Info, Query EAs From List, FID = 0x8002
13:16:27.164	24.625000	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0004 - NT Status: System - Error, Code = (13) STATUS_INVALID_PARAMETER
13:16:27.164	24.625000	192.168.2.100	192.168.2.10	SMB	SMB: C; Read Andx, FID = 0x8002, 658 bytes at Offset 0

13:16:27.023	24.484375	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents
13:16:27.023	24.484375	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx, FID = 0x400E
13:16:27.023	24.484375	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Transact, NT IOCTL, FID = 0x400E
13:16:27.023	24.484375	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Transact, Unknown NT Transaction Function
13:16:27.023	24.484375	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query FS Info, Object ID Info
13:16:27.023	24.484375	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2 - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:27.023	24.484375	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \chrismorley
13:16:27.023	24.484375	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0000
13:16:27.023	24.484375	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \chrismorley
13:16:27.023	24.484375	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0000
13:16:27.023	24.484375	192.168.2.100	192.168.2.10	SMB	SMB: C; Close, FID = 0x400E
13:16:27.023	24.484375	192.168.2.10	192.168.2.100	SMB	SMB: R; Close, FID = 0x0000
13:16:27.023	24.484375	192.168.2.100	192.168.2.10	SMB	SMB: C; Session Setup Andx
13:16:27.023	24.484375	192.168.2.100	192.168.2.10	NbtSS	NbtSS: NbtSS Continue payload, Length = 1238
13:16:27.023	24.484375	192.168.2.10	192.168.2.100	TCP	TCP: Flags=....A..., SrcPort=Microsoft-DS(445), DstPort=1073, Len=0, Seq=1762077628, Ack=384156695, Win=65535 (scale factor not found)
13:16:27.023	24.484375	192.168.2.10	192.168.2.100	SMB	SMB: R; Session Setup Andx
13:16:27.023	24.484375	192.168.2.100	192.168.2.10	SMB	SMB: C; Tree Connect Andx, Path = \\SVR001\IPC$, Service = ?????
13:16:27.023	24.484375	192.168.2.10	192.168.2.100	SMB	SMB: R; Tree Connect Andx, Service = IPC
13:16:27.023	24.484375	192.168.2.100	192.168.2.10	DFS	DFS
13:16:27.039	24.500000	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2 - NT Status: System - Error, Code = (549) STATUS_NOT_FOUND
13:16:27.039	24.500000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \srvsvc
13:16:27.039	24.500000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx, FID = 0x4002
13:16:27.039	24.500000	192.168.2.100	192.168.2.10	MSRPC	MSRPC: c/o Bind:  UUID{4B324FC8-1670-01D3-1278-5A47BF6EE188} Server Service  Call=0x1  Assoc Grp=0x0  Xmit=0x10B8  Recv=0x10B8 
13:16:27.039	24.500000	192.168.2.10	192.168.2.100	SMB	SMB: R; Write Andx, FID = 0x0000, 72 bytes
13:16:27.039	24.500000	192.168.2.100	192.168.2.10	SMB	SMB: C; Read Andx, FID = 0x4002, 1024 bytes at Offset 0

13:16:30.773	28.234375	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos
13:16:30.773	28.234375	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (186) STATUS_FILE_IS_A_DIRECTORY
13:16:30.773	28.234375	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos
13:16:30.773	28.234375	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (186) STATUS_FILE_IS_A_DIRECTORY
13:16:30.773	28.234375	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos
13:16:30.773	28.234375	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (186) STATUS_FILE_IS_A_DIRECTORY
13:16:30.773	28.234375	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \chrismorley\My Documents\new pos
13:16:30.773	28.234375	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.773	28.234375	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \chrismorley\My Documents\new pos
13:16:30.773	28.234375	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.773	28.234375	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx, FID = 0xC001
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query File Info, Query File Internal Info, FID = 0xC001
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query File Info, Query File Basic Info, FID = 0xC001
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query File Info, Query File Standard Info, FID = 0xC001
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query File Info, Query File EA Info, FID = 0xC001
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos:SummaryInformation:$DATA
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:SummaryInformation:$DATA
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos:Docf_SummaryInformation:$DATA
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:Docf_SummaryInformation:$DATA
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:SummaryInformation:$DATA
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:Docf_SummaryInformation:$DATA
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:SummaryInformation:$DATA
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789	28.250000	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:Docf_SummaryInformation:$DATA
13:16:30.789	28.250000	192.168.2.10	192.168.2.100	SMB	SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND

Have tried to google for any solution but most of it seems to refer to Windows 2000. I am running XP SP2 32-bit and Windows 2003 R2 Enterprise 64-bit, any ideas what i could check next? Do i need to pay in order to get support from Microsoft? I am running with Open License agreement.

Many thanks,

Chris

[cluberti]

First, make sure you have no UNC paths set in the PATH statement on any client machines. Second, make sure you aren't using the %homedrive%, %homepath%, or %homeshare% variables (those are old NT4 holdovers and can cause serious network speed issues when doing folder redirection). Last, make the following changes on all of your XP and 2000 clients:

Key: HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb\Parameters
Value: InfoCacheLevel
Type: REG_DWORD
Data: 10 (hex)

Key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
Value: NoRemoteRecursiveEvents
Type: REG_DWORD
Data: 1

Key: HKLM\SYSTEM\CurrentControlSet\Control\Session Manager
Value: SafeDllSearchMode
Type: REG_DWORD
Data: 1


After pushing these changes to the clients, reboot and see if the problem gets any better or worse. Also, make sure that the location you placed the folders in (on the 2K3 server) for your clients allows the client "change" NTFS permissions to the folders themselves, and the shares (if you created shares for these) allow "everyone" to have "full" permissions on the sharing tab to make sure users will have the necessary read and write access to the folders.

[g18c]

Thanks cluberti. I pushed the reg entries out via an adm template found here: http://blogs.sepago.de/helge/2007/11/07/so...rk-performance/ using group policy.

Fingers crossed, it seems to have sped things up and we are no longer getting torch lights and delays on opening my documents! Fingers crossed on that one.

A new issue i am having is a specific file under vista, redirected my documents. It is a word file, and although it opens instantly it takes a long time to close (Word stops responding for 30 seconds or so). After 30 seconds word closes. Checking netmon i am getting complaints about a temp file missing (filename begins with a tilde: ~) and the status is: STATUS_OBJECT_NAME_NOT_FOUND.

Now the strange thing is on the Business Vista box this only happens with that file in My Documents (which is offline file enabled), putting the same word file into a standard mapped network drive it closes instantly, along with working with the file disconnected from the network using offline files again it opens and closes instantly.

Here is the strange thing, the exact same file in My Documents (me logging into a different machine with my credentials) under Windows XP Pro, opens and closes instantly. This closing issue seems to be an issue with Vista Offline files??

Another quick question if i may, whilst your excellent advice seems to have sped up my network, shouldnt Windows 2003 and XP Pro come configured out of the box without any need to disable registry keys etc?

Many thanks in advance and for all the help so far,

Chris

This post has been edited by g18c: 02 January 2008 - 03:15 AM

[g18c]

Right this is driving me insane, under vista, some files in redirected my documents open fast, others take about 30 seconds to open. Some take 30 seconds to close. Its pretty random and driving me crazy!!

[cluberti]

Do the users have "change" permissions on the folder location? Word (and other Office apps) open files as temp (the tilde files) and only write changes when the file is saved or the auto save period elapses. If you save and close a file, the tilde file is written to the original document file, and the tilde file is deleted. If the users don't have the delete and create privs on the share, this can take forever.

Also, antivirus and antispyware applications can mess with offline file locations too, so make sure those are specifically omitted from scanning.

[g18c]

Hi, yes the shares were created automatically by redirected folders with grou policy. It only happens with some word files, not all. It is mostly random, ie the same file will have issues most of the time but on occasion not. Some other files are not affected.

The permissions as set by redirected folders GPO are System full control, and Creator/Owner full control. The owner is set to the user whos directory it is (i.e. any files in the my documents the owner is set to me). How can i reset the owner on all documents within a folder? I cant do this from the actual windows 2003 box as i dont have permissions to get into the directory (only system and creator have the permissions). I can manually add my permission as administrator to gain access to the userfiles share and make sure the owner is set correctly on all files.

I have disabled virus scanning of remtote drives, i will look into excluding my documents folder also. How can i disable this given there isnt a my documents location? I guess ill RTFM on my kaspersky antivirus.

Thanks for all the tips, seem to be getting there slowly but this is quite frustrating, thanks so much for the help.

Chris

[IT@SA-TECH]

Chris,

I'm having the exact same problems. Similar hardware, OS (server and desktop). Did you get this worked out? What was your solution?

Thanks,
Vince

[dondon1205]

we have the same problem..I had a Access application stored in server2003 and being access by 5 users tru file sharing and now it's very slow. Actually all data that being access from the server become very slow.

Please help.


Dondon

[don_howard]

Does anyone know why the OS searches the home drive for DLL files?
STATUS_OBJECT_NAME_NOT_FOUND - I see this numerous times when someone logs in and once we have 50+ users logging in via Citrix things slow down.

All of the recommended Reg hacks and patches have been applied and I am talking with MS today. Just wondering if anyone figured out the WHY.

[don_howard]

230 10.399622 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
231 10.401989 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO
232 10.404339 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
233 10.406156 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO
234 10.410467 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
235 10.412607 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO
236 10.413205 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:
237 10.414561 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO
238 10.420690 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\RMProcessLink.dll
239 10.422107 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
240 10.422222 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \RMProcessLink.dll
241 10.423963 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
242 10.424641 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\mfaphook.dll
243 10.426069 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
244 10.426156 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \mfaphook.dll
245 10.429098 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
246 10.430210 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\CtxSbxHook.dll
247 10.432572 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
248 10.432661 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \CtxSbxHook.dll
249 10.434497 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
250 10.435835 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\mmhook.dll
251 10.438164 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
252 10.438262 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \mmhook.dll
253 10.440378 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
254 10.441197 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\tzhook.dll
255 10.442806 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
256 10.442903 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \tzhook.dll
257 10.445203 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
258 10.445999 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\scardhook.dll
259 10.448738 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
260 10.448829 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \scardhook.dll
261 10.450637 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
262 10.452459 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\Twnhook.dll
263 10.454843 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
264 10.454932 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \Twnhook.dll
265 10.456694 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
266 10.457449 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\cxinjime.dll
267 10.459108 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
268 10.459202 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \cxinjime.dll
269 10.460410 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
270 10.461236 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\wdmaudhook.dll
271 10.463593 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND
272 10.463686 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \wdmaudhook.dll
273 10.465353 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

[cluberti]

don_howard, on Oct 2 2008, 10:47 AM, said:

Does anyone know why the OS searches the home drive for DLL files?
STATUS_OBJECT_NAME_NOT_FOUND - I see this numerous times when someone logs in and once we have 50+ users logging in via Citrix things slow down.

All of the recommended Reg hacks and patches have been applied and I am talking with MS today. Just wondering if anyone figured out the WHY.

264061 Home Folder Is Searched First When You Try to Run a Program
http://support.microsoft.com/default.aspx?...kb;EN-US;264061

306850 Programs start slowly or slow logon if the network connection to your home folder is slow
http://support.microsoft.com/default.aspx?...kb;EN-US;306850

So you would need both the StartRunNoHOMEPATH value and the SafeDllSearchMode reg values, at the minimum. I would always recommend InfoCacheLevel and NoRemoteRecursiveEvents as well.