Cisco VPN Client and Windows 7 Runs Extremely Slow
A 40 user network using Server 03, mixed XP and Windows 7 Pro client systems. Remote access using Cisco VPN Client, on the XP laptops, acceptable performance. On systems using W7 Pro, totally unacceptable slow, taking as much as one minute to load a folder on the network. Thought the problem was in the VPN Client, installed version 5.0.07.0440, no luck. 32 and 64 bit systems run so slow to be unusable. Disabled the firewall and UAC, no effect. Do I have to go back to XP? Thanks Bill The beatings will continue until morale improves!
June 16th, 2011 11:21pm

Hi Bill, Thanks for posting in TechNet forum. The slow performance could be caused by many reasons, the security settings, the network connection and etc. Firstly, check the Local Security Policy settings on your Windows 7 clients: 1. Click Start, input secpol.msc in the search box, run it as administrator. 2. Navigate to Security Settings - Local Policies - Security Options 3. In the right panel, double-click "Network Security: LAN Manager Authentication Level", change the setting to: "Send LM&NTLM - use NTLMv2 session if negotiated" 4. Double-click "Network Security: Minimum session security for NTLM SSP based (including secure RPC) clients", uncheck "Require 128-bit encryption" box, then click OK. If it doesn't work, since the SMB protocol was changed since Windows Vista, I suggest you disable SMB 2.0 in your Windows 7 client and use the SMB 1.0 as default to check if it will speed up. Follow the "Resolution" section in this KB: http://support.microsoft.com/kb/281308. Modify the registry in Windows 7, please backup the key before the modification. If all the above doesn't work, I suggest you capture the network traffic to analyze the connection. You can download the Network Monitor from http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=4865. Also refer to: How to use Network Monitor to capture network traffic. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
June 17th, 2011 6:12am

I really feel dumb saying this, but I can't get aroud the "Windows cannot access the specified device" security message. Won't let me run secpol.msc as an administrator. Took ownership of the file, changed permissions but it still will not allow changes. (This is my 3rd W7 system).The beatings will continue until morale improves!
June 17th, 2011 7:57pm

Hi Bill, Thanks for the update. When you run secpol.msc as an administrator, what's the error message you got? Is it Windows 7 client domain-joined? Are there any domain group policy settings forbid the user change the local security policy? Contact the domain administrator for the detailed information. In addition to my former reply, if you change the local security settings and disable SMB2.0 protocol, the issue still persists. I suggest you use the Network Monitor, capture the network traffic, comparing the traffic with another working computer, you'll find which steps take long time. You can download the Network Monitor from http://www.microsoft.com/download/en/details.aspx?id=4865 Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
June 20th, 2011 10:36am

Hi Bill, Thanks for the update. When you run secpol.msc as an administrator, what's the error message you got? Is it Windows 7 client domain-joined? Are there any domain group policy settings forbid the user change the local security policy? Contact the domain administrator for the detailed information. In addition to my former reply, if you change the local security settings and disable SMB2.0 protocol, the issue still persists. I suggest you use the Network Monitor, capture the network traffic, comparing the traffic with another working computer, you'll find which steps take long time. You can download the Network Monitor from http://www.microsoft.com/download/en/details.aspx?id=4865 Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. The exact error message, when right clicking on the file in \Windows\System32\ and clicking on 'Run as" is: Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access them. If there is a setting the forbids users to change local security policies, I can not find it in either gpedit.msc or the domain or domain controller security policy. I can find no reference to Windows 7 in KB281308. Thanks BillThe beatings will continue until morale improves!
June 21st, 2011 1:41am

Hi Bill, Are there any related logs about this permission problem? How about other Windows 7 clients? Do they have the same issue? Please check the permission of C:\Windows\System32\GroupPolicy folder. Do you have enough permission? I suspect there's some problem with the local security policy database. I suggest you reset the security policy database. Refer to here: http://support.microsoft.com/kb/313222. If it still doesn't work, use the Network Monitor as I replied before to check the network traffic. In addition, for the KB281308 you mentioned, check the following description in More Information section: "you can set the registry key that is mentioned in the "Resolution" section on Windows Server 2008, Windows Server 2008 R2, Windows Vista, or Windows 7." Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
June 21st, 2011 8:34am

Miya I didn't see anything in the logs concerning the permission problem. I have checked other Windows 7 client systems attached to this domain, the ones I have checked so far all return the same error when trying to run secpol.msc as administrator so the issue is definately related to the local security policy database. I have also looked at my home system, which is not connected to this domain, No error running secpol.msc as admin. I have installed the Network Monitor, haven't had time to do much with it yet. Thanks for your help on this issue. Bill the beatings will continue until morale improves!The beatings will continue until morale improves!
June 21st, 2011 7:07pm

The plot thickens!..................... I didn't mention that I was connecting thru an HTC Desire cell phone tethered with a USB cable. Internet connection is reasonably fast. Just to be sure, I took the laptop in question home and connected it to the Internet thru my wireless network. Everything works fine. Drives map and performance is very fast. I don't know if it's an issue with other cell phones used for internet connections, but the phone seems to be the problem.The beatings will continue until morale improves!
Free Windows Admin Tool Kit Click here and download it now
June 21st, 2011 11:37pm

Hi Bill, Glad you find the casue! You can test this phone with other machines to check the result. I suggest you also contact HTC support check if they find the similar situation. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
June 22nd, 2011 12:29pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics