Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account



Photo

Trace Windows 7 boot/shutdown/hibernate/standby/resume issues

slow Boot bootvis performance

  • Please log in to reply
1265 replies to this topic

#1251
MagicAndre1981

MagicAndre1981

    after Windows 7 GA still Vista lover :)

  • Patrons
  • 6,208 posts
  • Joined 28-August 05
  • OS:Windows 8 x64
  • Country: Country Flag

Donator

yeah, I also suggest a scheduled task which starts at logon with a delay of 1 or 2 minutes.


Posted Image


How to remove advertisement from MSFN

#1252
Murf

Murf
  • Member
  • 8 posts
  • Joined 21-May 15
  • OS:Windows 7 x64
  • Country: Country Flag

MagicAndre,  thanks a ton for this tutorial. I have been having issues with the delay in boot right after windows splash, before the login screen, lastas apporx 45 secs.  I have an ssd so this is bothersom for me.  it ha sonly recently started.   Using your tutorial I think I was able to trace the issue to the winlogininit section and specifcally the rpcss service,   Howver, I am unable to get my graph layout to the easy to read one you show with your screen shots. I like the layout of those.   Could you take alook at my xml and etl file and tell me what you think?   I can post  here or pm it to you.   Thanks again.

 

 



#1253
MagicAndre1981

MagicAndre1981

    after Windows 7 GA still Vista lover :)

  • Patrons
  • 6,208 posts
  • Joined 28-August 05
  • OS:Windows 8 x64
  • Country: Country Flag

Donator

Send me a link to the ETL and I'll take a look at it.


  • Murf likes this
Posted Image

#1254
Murf

Murf
  • Member
  • 8 posts
  • Joined 21-May 15
  • OS:Windows 7 x64
  • Country: Country Flag

Done thanks :)



#1255
MagicAndre1981

MagicAndre1981

    after Windows 7 GA still Vista lover :)

  • Patrons
  • 6,208 posts
  • Joined 28-August 05
  • OS:Windows 8 x64
  • Country: Country Flag

Donator

WaitForLSM is slow (caused by the slow RpcSs start).

 

Try this hotfix:

 

https://support.micr...n-us/kb/2661001

 

If you still have the issue, run this command, here I capture wait data:

 

xbootmgr -trace boot -traceFlags BASE+LATENCY+DISK_IO_INIT+DISPATCHER+FILE_IO+FILENAME+POWER -stackwalk profile+CSwitch+ReadyThread+DiskReadInit+DiskWriteInit  -resultPath C:\TEMP

 

Also please compress the ETL file as 7z/RAR to reduce the size.


  • Murf likes this
Posted Image

#1256
Murf

Murf
  • Member
  • 8 posts
  • Joined 21-May 15
  • OS:Windows 7 x64
  • Country: Country Flag

Applied the hotfix and after the prompted reboot it looked p[romising, however, after a subsequent reboot, the issue still persists.

I have sent you the 2nd compressed ETL file.



#1257
MagicAndre1981

MagicAndre1981

    after Windows 7 GA still Vista lover :)

  • Patrons
  • 6,208 posts
  • Joined 28-August 05
  • OS:Windows 8 x64
  • Country: Country Flag

Donator

I can see the 40s delay in the Wait data. rpcrt4.dll!Invoke calls sspisrv.dll!SspirLogonUser and later lsasrv.dll!NegLogonUserEx2 and wait for a response of lsass.exe.
 
wait_1.png
 
The lsass.exe checks some registry keys if you have the system configured to automatically logon with a username/password (authui.dll!CAutoLogon::IsAutoLogonMode, authui.dll!CAutoLogon::GetAutoLogonCredential, kernel32.dll!RegCreateKeyExW).
 
wait_2.png
 

wait_3.png

 
Do you have this configured? If yes, disable it and enter your password on its own. Is it faster now?


Posted Image

#1258
Murf

Murf
  • Member
  • 8 posts
  • Joined 21-May 15
  • OS:Windows 7 x64
  • Country: Country Flag

I did have autologin enabled but the delay is the same with it turned off, I sent you another etl with autologin turned off

Its pretty much 45 seconds from when 'Starting windows' disappears to when the login screen shows up.

 

w7 is on a SSD.



#1259
MagicAndre1981

MagicAndre1981

    after Windows 7 GA still Vista lover :)

  • Patrons
  • 6,208 posts
  • Joined 28-August 05
  • OS:Windows 8 x64
  • Country: Country Flag

Donator

still the same. I need to capture registry information to see more details:

 

xbootmgr -trace boot -traceFlags BASE+LATENCY+DISPATCHER+POWER+REGISTRY+REG_HIVE -stackwalk profile+CSwitch+ReadyThread+RegQueryKey+RegEnumerateKey+RegEnumerateValueKey+RegDeleteKey+RegCreateKey+RegOpenKey+RegSetValue+RegDeleteValue+RegQueryValue+RegCloseKey  -resultPath C:\TEMP


Posted Image

#1260
Murf

Murf
  • Member
  • 8 posts
  • Joined 21-May 15
  • OS:Windows 7 x64
  • Country: Country Flag

Ok, sent ya the 3rd ETL, Again, really appreciate you taking the with this, been driving me batty trying to find and fix the cause.



#1261
MagicAndre1981

MagicAndre1981

    after Windows 7 GA still Vista lover :)

  • Patrons
  • 6,208 posts
  • Joined 28-August 05
  • OS:Windows 8 x64
  • Country: Country Flag

Donator

no registry operation takes very long (only 1s). I'm out of ideas why the Windows hangs. When did this start? Have you changed anything?


Posted Image

#1262
Murf

Murf
  • Member
  • 8 posts
  • Joined 21-May 15
  • OS:Windows 7 x64
  • Country: Country Flag

What about the dcomlaunch svchost (844)  I see that takes about the same amount of time i am on that black window with a mouse cursor?

My boot time log details has this:

 

 

Log Name:      Microsoft-Windows-Diagnostics-Performance/Operational
Source:        Microsoft-Windows-Diagnostics-Performance
Date:          5/23/2015 8:21:34 AM
Event ID:      100
Task Category: Boot Performance Monitoring
Level:         Warning
Keywords:      Event Log
User:          LOCAL SERVICE
Computer:      Admin-PC
Description:
Windows has started up:
     Boot Duration        :    78019ms
     IsDegradation        :    false
     Incident Time (UTC)    :    ‎2015‎-‎05‎-‎23T13:19:06.578000100Z
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
  <System>
    <Provider Name="Microsoft-Windows-Diagnostics-Performance" Guid="{CFC18EC0-96B1-4EBA-961B-622CAEE05B0A}" />
    <EventID>100</EventID>
    <Version>2</Version>
    <Level>3</Level>
    <Task>4002</Task>
    <Opcode>34</Opcode>
    <Keywords>0x8000000000010000</Keywords>
    <TimeCreated SystemTime="2015-05-23T13:21:34.289551000Z" />
    <EventRecordID>2347</EventRecordID>
    <Correlation ActivityID="{02EB6C40-F800-0000-2433-C50B5B95D001}" />
    <Execution ProcessID="1588" ThreadID="3744" />
    <Channel>Microsoft-Windows-Diagnostics-Performance/Operational</Channel>
    <Computer>Admin-PC</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="BootTsVersion">2</Data>
    <Data Name="BootStartTime">2015-05-23T13:19:06.578000100Z</Data>
    <Data Name="BootEndTime">2015-05-23T13:21:31.838410800Z</Data>
    <Data Name="SystemBootInstance">114</Data>
    <Data Name="UserBootInstance">111</Data>
    <Data Name="BootTime">78019</Data>
    <Data Name="MainPathBootTime">49819</Data>
    <Data Name="BootKernelInitTime">40</Data>
    <Data Name="BootDriverInitTime">519</Data>
    <Data Name="BootDevicesInitTime">697</Data>
    <Data Name="BootPrefetchInitTime">0</Data>
    <Data Name="BootPrefetchBytes">0</Data>
    <Data Name="BootAutoChkTime">0</Data>
    <Data Name="BootSmssInitTime">4005</Data>
    <Data Name="BootCriticalServicesInitTime">40736</Data>
    <Data Name="BootUserProfileProcessingTime">230</Data>
    <Data Name="BootMachineProfileProcessingTime">3</Data>
    <Data Name="BootExplorerInitTime">965</Data>
    <Data Name="BootNumStartupApps">10</Data>
    <Data Name="BootPostBootTime">28200</Data>
    <Data Name="BootIsRebootAfterInstall">false</Data>
    <Data Name="BootRootCauseStepImprovementBits">0</Data>
    <Data Name="BootRootCauseGradualImprovementBits">0</Data>
    <Data Name="BootRootCauseStepDegradationBits">0</Data>
    <Data Name="BootRootCauseGradualDegradationBits">0</Data>
    <Data Name="BootIsDegradation">false</Data>
    <Data Name="BootIsStepDegradation">false</Data>
    <Data Name="BootIsGradualDegradation">false</Data>
    <Data Name="BootImprovementDelta">0</Data>
    <Data Name="BootDegradationDelta">0</Data>
    <Data Name="BootIsRootCauseIdentified">false</Data>
    <Data Name="OSLoaderDuration">579</Data>
    <Data Name="BootPNPInitStartTimeMS">40</Data>
    <Data Name="BootPNPInitDuration">937</Data>
    <Data Name="OtherKernelInitDuration">201</Data>
    <Data Name="SystemPNPInitStartTimeMS">1132</Data>
    <Data Name="SystemPNPInitDuration">279</Data>
    <Data Name="SessionInitStartTimeMS">1418</Data>
    <Data Name="Session0InitDuration">2511</Data>
    <Data Name="Session1InitDuration">383</Data>
    <Data Name="SessionInitOtherDuration">1110</Data>
    <Data Name="WinLogonStartTimeMS">5423</Data>
    <Data Name="OtherLogonInitActivityDuration">43196</Data>
    <Data Name="UserLogonWaitDuration">5537</Data>
  </EventData>
</Event>

 

Do those times above help in determining what is causing the delay?

 

No changes that I know of.  I 'think' it started right after we ha d thunder storm go by, power to the house would go out and come right back on, Happened about 4 or 5 times in 10-15 minutes.  Computer was on each time. 



#1263
MagicAndre1981

MagicAndre1981

    after Windows 7 GA still Vista lover :)

  • Patrons
  • 6,208 posts
  • Joined 28-August 05
  • OS:Windows 8 x64
  • Country: Country Flag

Donator

this is not helpful. It only shows the known 40s delay.


Posted Image

#1264
Murf

Murf
  • Member
  • 8 posts
  • Joined 21-May 15
  • OS:Windows 7 x64
  • Country: Country Flag

Well that is unfortunate.   Nothing I can do about the dcomlaunch causing the delay now?

 

No changes, only thing diff is the storm I mentioned above.  Well I do appreciate you trying though.  Thanks a bunch.

 

Running the first script still shows rpcss as the cause but I guess the other ones ya had me run go deeper into the rpcss? 


Edited by Murf, 24 May 2015 - 03:20 PM.


#1265
jaclaz

jaclaz

    The Finder

  • Developer
  • 15,489 posts
  • Joined 23-July 04
  • OS:none specified
  • Country: Country Flag

OT, and probably unrelated.

 

Over the years I have had every kind of *queer* hardware issues as the effect of storms (or of power surges or of both).

While the most typical one is obviously the PSU not working anymore, I had one case several years ago that may be loosely connected to your issue.

During a storm a lighting struck near the building and (presumably or at least this is the most logical explanation we could find) *somehow* raised the "ground level" in such a way that several devices (on the "low voltage" side, not on "mains" side) were affected, namely:

  1. a couple of modules of the telephone PBX
  2. the serial printer connected to the PBX (but not the serial port module on the PBX)
  3. a couple network cards on different PC's (replaceable)
  4. some ports ONLY on a network hub/switch (but NOT the ones to which the above and the below computer were connected to)
  5. a small VIA EPIA motherboard (with an integrated network card stopped booting, as a matter of fact it took like three minutes to boot to Windows 2000 and then the network card wouldn't work properly/reliably).

 

The strange thing is #5 as the network card diagnostics (in DOS, i.e. NDIS or whatever it is/was called) gave a fully working card as a result.

However, in the immediate I disabled the embedded network card and added a PCI one and everything went back to normal.

Later the motherboard was replaced and - just for the fun of it - I tried using the old, defective one for running just DOS (without network connection) and it worked fine, then I tried re-enabling the embedded network card and it did work (from DOS) just fine, still Windows 2000 would take forever to boot and then the network card had "intermittent" working.

 

@Murf

So, I know that it sounds crazy :w00t: :ph34r:, but since the issue revolves around rpcrt4.dll, which is connected with network, if that machine is a desktop, can you try and see what happens if you disable the network interface and/or use an add-on network card instead?

 

jaclaz



#1266
Murf

Murf
  • Member
  • 8 posts
  • Joined 21-May 15
  • OS:Windows 7 x64
  • Country: Country Flag

Ok, just tried rebooting with nic disabled,  same delay unfortunately. 







Also tagged with one or more of these keywords: slow, Boot, bootvis, performance

4 user(s) are reading this topic

0 members, 4 guests, 0 anonymous users