• Announcements

    • xper

      MSFN Sponsorship and AdBlockers!   07/10/2016

      Dear members, MSFN is made available via subscriptions, donations and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, become a site sponsor and ads will be disabled automatically and by subscribing you get other sponsor benefits.
g18c

Server 2003 Redirected Offline files slow to open and frequent Working

18 posts in this topic

Hi, i have pushed Offline files and redirected folders via group policy for our domain. It does work with files (My documents) being

redirected to the network and offline files allowing the users to work away from the network.

However, some users are complaining My Documents is slow to open (first time in the morning and at various points throughout the day),

i.e. they double click on My documents and it will sit there for around 20 seconds, and in some cases upto 2 minutes, before My

Documents open. Opening any network share during this time is no problem (mapped drive in my computer) and that is fast as expected.

The only delay is with the redirected my documents.

Another issue i have is that i get frequent disconnects for offline files, the baloon tip pops up "connection lost to svr001 - You are now Working Offline". i can click to synchronise and it goes straight back up no problem. I know the link is still ok as i can ping the server and infact it is my dns server and i can browse the internet fine.

We are running Windows XP SP2, and Windows 2003 R2 with all updates and latest service pack. The box is running as domain controller, and location for the offline files/redirected folders.

Would apprerciate any help or pointers as the complaints im getting from users is starting to drive me mad! I would like to get the network redirected folders back upto speed.

Many thanks in advance,

Chris

0

Share this post


Link to post
Share on other sites

Do you have Broadcom (or rebranded Broadcom) network cards in that server? If so, run the command "netsh int ip set chimney DISABLED", then install the following hotfix:

http://support.microsoft.com/kb/936594

Again, without a network trace I'm guessing, but it's worth a shot (and if you've got broadcom NICs on 2K3 SP2, you should do this anyway!).

0

Share this post


Link to post
Share on other sites

Thanks for the reply.

I did make those changes and rebooted the server, it seemed a little snappier until 30 minutes in my documents started delaying opening for 30 seconds or so.

To give some insight into my setup, im actually running on a DELL PowerEdge 2900 with a XenSource hypervisor. I do this so i can partition the logical machines and it does work well, i run one windows 2003 DC as a virtual machine and one SQL server virtual machine.

I didnt mention this as i dont want to throw a red herring into the works as im pretty sure this isnt a hardware issue as when i get these slow downs with my documents, i can browse normal network shares fine in network neighbourhood, and the transfer speeds are good at 70% utilisation of the link of transfers from the server - imho 70mbps on 100mbps isnt so bad for the windows tcp/ip stack.

Anyway that issue aside, i dont know what else it could be. Maybe because my DC is the same box as the redirected folder location?

Many thanks for your time in posting, if you do have any other ideas please do let me know.

Thanks,

Chris

0

Share this post


Link to post
Share on other sites

If you got a network trace from a client machine where the browsing was slow, it'd be interesting to see the communcations (or lack thereof) between it and the file server.

0

Share this post


Link to post
Share on other sites

download netmon for microsoft downloads, start a trace on a box that is having someissues and record the log, from that we can see where the time out is or why it is lagging.

0

Share this post


Link to post
Share on other sites
if you've got broadcom NICs on 2K3 SP2, you should do this anyway!

Does this include 2003 SP2 x64?

And being that he has a Dell PowerEdge you can be assured that he either has an Intel or Broadcom NIC. They tend to use Broadcom more these days (unless you specifically order add-in Intel NICs).

0

Share this post


Link to post
Share on other sites

I believe so, yes - if the reg keys exist, then the answer is yes.

0

Share this post


Link to post
Share on other sites

Hi chaps, thanks for the replies. Sorry for the late reply i have just managed to get some traces from netmon v3 and there are a whole bunch of errors on there:

13:16:27.164	24.625000	192.168.2.100	192.168.2.10	SMB	SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \CHRISMORLEY\MY DOCUMENTS\MY MUSIC\DESKTOP.INI
13:16:27.164 24.625000 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0000
13:16:27.164 24.625000 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \CHRISMORLEY\MY DOCUMENTS\MY MUSIC\DESKTOP.INI
13:16:27.164 24.625000 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0000
13:16:27.164 24.625000 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query File Info, Query EAs From List, FID = 0x8002
13:16:27.164 24.625000 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0004 - NT Status: System - Error, Code = (13) STATUS_INVALID_PARAMETER
13:16:27.164 24.625000 192.168.2.100 192.168.2.10 SMB SMB: C; Read Andx, FID = 0x8002, 658 bytes at Offset 0

13:16:27.023	24.484375	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents
13:16:27.023 24.484375 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx, FID = 0x400E
13:16:27.023 24.484375 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Transact, NT IOCTL, FID = 0x400E
13:16:27.023 24.484375 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Transact, Unknown NT Transaction Function
13:16:27.023 24.484375 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query FS Info, Object ID Info
13:16:27.023 24.484375 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2 - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:27.023 24.484375 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \chrismorley
13:16:27.023 24.484375 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0000
13:16:27.023 24.484375 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \chrismorley
13:16:27.023 24.484375 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0000
13:16:27.023 24.484375 192.168.2.100 192.168.2.10 SMB SMB: C; Close, FID = 0x400E
13:16:27.023 24.484375 192.168.2.10 192.168.2.100 SMB SMB: R; Close, FID = 0x0000
13:16:27.023 24.484375 192.168.2.100 192.168.2.10 SMB SMB: C; Session Setup Andx
13:16:27.023 24.484375 192.168.2.100 192.168.2.10 NbtSS NbtSS: NbtSS Continue payload, Length = 1238
13:16:27.023 24.484375 192.168.2.10 192.168.2.100 TCP TCP: Flags=....A..., SrcPort=Microsoft-DS(445), DstPort=1073, Len=0, Seq=1762077628, Ack=384156695, Win=65535 (scale factor not found)
13:16:27.023 24.484375 192.168.2.10 192.168.2.100 SMB SMB: R; Session Setup Andx
13:16:27.023 24.484375 192.168.2.100 192.168.2.10 SMB SMB: C; Tree Connect Andx, Path = \\SVR001\IPC$, Service = ?????
13:16:27.023 24.484375 192.168.2.10 192.168.2.100 SMB SMB: R; Tree Connect Andx, Service = IPC
13:16:27.023 24.484375 192.168.2.100 192.168.2.10 DFS DFS
13:16:27.039 24.500000 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2 - NT Status: System - Error, Code = (549) STATUS_NOT_FOUND
13:16:27.039 24.500000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \srvsvc
13:16:27.039 24.500000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx, FID = 0x4002
13:16:27.039 24.500000 192.168.2.100 192.168.2.10 MSRPC MSRPC: c/o Bind: UUID{4B324FC8-1670-01D3-1278-5A47BF6EE188} Server Service Call=0x1 Assoc Grp=0x0 Xmit=0x10B8 Recv=0x10B8
13:16:27.039 24.500000 192.168.2.10 192.168.2.100 SMB SMB: R; Write Andx, FID = 0x0000, 72 bytes
13:16:27.039 24.500000 192.168.2.100 192.168.2.10 SMB SMB: C; Read Andx, FID = 0x4002, 1024 bytes at Offset 0

13:16:30.773	28.234375	192.168.2.100	192.168.2.10	SMB	SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos
13:16:30.773 28.234375 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (186) STATUS_FILE_IS_A_DIRECTORY
13:16:30.773 28.234375 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos
13:16:30.773 28.234375 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (186) STATUS_FILE_IS_A_DIRECTORY
13:16:30.773 28.234375 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos
13:16:30.773 28.234375 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (186) STATUS_FILE_IS_A_DIRECTORY
13:16:30.773 28.234375 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \chrismorley\My Documents\new pos
13:16:30.773 28.234375 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.773 28.234375 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query Path Info, Query File Basic Info, Pattern = \chrismorley\My Documents\new pos
13:16:30.773 28.234375 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.773 28.234375 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx, FID = 0xC001
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query File Info, Query File Internal Info, FID = 0xC001
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query File Info, Query File Basic Info, FID = 0xC001
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query File Info, Query File Standard Info, FID = 0xC001
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Transact2, Query File Info, Query File EA Info, FID = 0xC001
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Transact2, Open2, FID = 0x0000
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos:SummaryInformation:$DATA
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:SummaryInformation:$DATA
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \chrismorley\My Documents\new pos:Docf_SummaryInformation:$DATA
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:Docf_SummaryInformation:$DATA
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:SummaryInformation:$DATA
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:Docf_SummaryInformation:$DATA
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:SummaryInformation:$DATA
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND
13:16:30.789 28.250000 192.168.2.100 192.168.2.10 SMB SMB: C; Nt Create Andx, FileName = \CHRISMORLEY\MY DOCUMENTS\NEW POS:Docf_SummaryInformation:$DATA
13:16:30.789 28.250000 192.168.2.10 192.168.2.100 SMB SMB: R; Nt Create Andx - NT Status: System - Error, Code = (52) STATUS_OBJECT_NAME_NOT_FOUND

Have tried to google for any solution but most of it seems to refer to Windows 2000. I am running XP SP2 32-bit and Windows 2003 R2 Enterprise 64-bit, any ideas what i could check next? Do i need to pay in order to get support from Microsoft? I am running with Open License agreement.

Many thanks,

Chris

0

Share this post


Link to post
Share on other sites

First, make sure you have no UNC paths set in the PATH statement on any client machines. Second, make sure you aren't using the %homedrive%, %homepath%, or %homeshare% variables (those are old NT4 holdovers and can cause serious network speed issues when doing folder redirection). Last, make the following changes on all of your XP and 2000 clients:

Key: HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb\Parameters

Value: InfoCacheLevel

Type: REG_DWORD

Data: 10 (hex)

Key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer

Value: NoRemoteRecursiveEvents

Type: REG_DWORD

Data: 1

Key: HKLM\SYSTEM\CurrentControlSet\Control\Session Manager

Value: SafeDllSearchMode

Type: REG_DWORD

Data: 1

After pushing these changes to the clients, reboot and see if the problem gets any better or worse. Also, make sure that the location you placed the folders in (on the 2K3 server) for your clients allows the client "change" NTFS permissions to the folders themselves, and the shares (if you created shares for these) allow "everyone" to have "full" permissions on the sharing tab to make sure users will have the necessary read and write access to the folders.

0

Share this post


Link to post
Share on other sites

Thanks cluberti. I pushed the reg entries out via an adm template found here: http://blogs.sepago.de/helge/2007/11/07/so...rk-performance/ using group policy.

Fingers crossed, it seems to have sped things up and we are no longer getting torch lights and delays on opening my documents! Fingers crossed on that one.

A new issue i am having is a specific file under vista, redirected my documents. It is a word file, and although it opens instantly it takes a long time to close (Word stops responding for 30 seconds or so). After 30 seconds word closes. Checking netmon i am getting complaints about a temp file missing (filename begins with a tilde: ~) and the status is: STATUS_OBJECT_NAME_NOT_FOUND.

Now the strange thing is on the Business Vista box this only happens with that file in My Documents (which is offline file enabled), putting the same word file into a standard mapped network drive it closes instantly, along with working with the file disconnected from the network using offline files again it opens and closes instantly.

Here is the strange thing, the exact same file in My Documents (me logging into a different machine with my credentials) under Windows XP Pro, opens and closes instantly. This closing issue seems to be an issue with Vista Offline files??

Another quick question if i may, whilst your excellent advice seems to have sped up my network, shouldnt Windows 2003 and XP Pro come configured out of the box without any need to disable registry keys etc?

Many thanks in advance and for all the help so far,

Chris

Edited by g18c
0

Share this post


Link to post
Share on other sites

Right this is driving me insane, under vista, some files in redirected my documents open fast, others take about 30 seconds to open. Some take 30 seconds to close. Its pretty random and driving me crazy!!

0

Share this post


Link to post
Share on other sites

Do the users have "change" permissions on the folder location? Word (and other Office apps) open files as temp (the tilde files) and only write changes when the file is saved or the auto save period elapses. If you save and close a file, the tilde file is written to the original document file, and the tilde file is deleted. If the users don't have the delete and create privs on the share, this can take forever.

Also, antivirus and antispyware applications can mess with offline file locations too, so make sure those are specifically omitted from scanning.

0

Share this post


Link to post
Share on other sites

Hi, yes the shares were created automatically by redirected folders with grou policy. It only happens with some word files, not all. It is mostly random, ie the same file will have issues most of the time but on occasion not. Some other files are not affected.

The permissions as set by redirected folders GPO are System full control, and Creator/Owner full control. The owner is set to the user whos directory it is (i.e. any files in the my documents the owner is set to me). How can i reset the owner on all documents within a folder? I cant do this from the actual windows 2003 box as i dont have permissions to get into the directory (only system and creator have the permissions). I can manually add my permission as administrator to gain access to the userfiles share and make sure the owner is set correctly on all files.

I have disabled virus scanning of remtote drives, i will look into excluding my documents folder also. How can i disable this given there isnt a my documents location? I guess ill RTFM on my kaspersky antivirus.

Thanks for all the tips, seem to be getting there slowly but this is quite frustrating, thanks so much for the help.

Chris

0

Share this post


Link to post
Share on other sites

Chris,

I'm having the exact same problems. Similar hardware, OS (server and desktop). Did you get this worked out? What was your solution?

Thanks,

Vince

0

Share this post


Link to post
Share on other sites

we have the same problem..I had a Access application stored in server2003 and being access by 5 users tru file sharing and now it's very slow. Actually all data that being access from the server become very slow.

Please help.

Dondon

0

Share this post


Link to post
Share on other sites

Does anyone know why the OS searches the home drive for DLL files?

STATUS_OBJECT_NAME_NOT_FOUND - I see this numerous times when someone logs in and once we have 50+ users logging in via Citrix things slow down.

All of the recommended Reg hacks and patches have been applied and I am talking with MS today. Just wondering if anyone figured out the WHY.

0

Share this post


Link to post
Share on other sites

230 10.399622 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:

231 10.401989 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO

232 10.404339 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:

233 10.406156 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO

234 10.410467 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:

235 10.412607 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO

236 10.413205 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path:

237 10.414561 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO

238 10.420690 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\RMProcessLink.dll

239 10.422107 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

240 10.422222 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \RMProcessLink.dll

241 10.423963 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

242 10.424641 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\mfaphook.dll

243 10.426069 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

244 10.426156 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \mfaphook.dll

245 10.429098 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

246 10.430210 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\CtxSbxHook.dll

247 10.432572 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

248 10.432661 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \CtxSbxHook.dll

249 10.434497 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

250 10.435835 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\mmhook.dll

251 10.438164 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

252 10.438262 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \mmhook.dll

253 10.440378 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

254 10.441197 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\tzhook.dll

255 10.442806 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

256 10.442903 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \tzhook.dll

257 10.445203 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

258 10.445999 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\scardhook.dll

259 10.448738 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

260 10.448829 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \scardhook.dll

261 10.450637 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

262 10.452459 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\Twnhook.dll

263 10.454843 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

264 10.454932 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \Twnhook.dll

265 10.456694 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

266 10.457449 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\cxinjime.dll

267 10.459108 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

268 10.459202 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \cxinjime.dll

269 10.460410 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

270 10.461236 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \WINDOWS\wdmaudhook.dll

271 10.463593 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

272 10.463686 162.123.110.52 162.123.21.65 SMB Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \wdmaudhook.dll

273 10.465353 162.123.21.65 162.123.110.52 SMB Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND

0

Share this post


Link to post
Share on other sites
Does anyone know why the OS searches the home drive for DLL files?

STATUS_OBJECT_NAME_NOT_FOUND - I see this numerous times when someone logs in and once we have 50+ users logging in via Citrix things slow down.

All of the recommended Reg hacks and patches have been applied and I am talking with MS today. Just wondering if anyone figured out the WHY.

264061 Home Folder Is Searched First When You Try to Run a Program

http://support.microsoft.com/default.aspx?...kb;EN-US;264061

306850 Programs start slowly or slow logon if the network connection to your home folder is slow

http://support.microsoft.com/default.aspx?...kb;EN-US;306850

So you would need both the StartRunNoHOMEPATH value and the SafeDllSearchMode reg values, at the minimum. I would always recommend InfoCacheLevel and NoRemoteRecursiveEvents as well.

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.