Windows 7 VPN Connection Issue: Connection is very slow and unresponsive, group policy error
Hi all, I've encountered some problems with my vpn work connection. I'm using a Windows 7 Enterprise (x64) and the integrated VPN Client. The router is a standard one, send from my local operator. My machine is in the same domain with the resources and connected via lan over two different switches. Now the problem: I had the same issue once before, thats why I reinstalled my os. After the reinstallation everything works pretty good, but after a short time the problems occur again. The main problem is, that the access to any domain-resource over the vpn seems to be very very slow. For example if I try to open my Outlook 2010 it hangs when it tries to load the Profile. After some time I get the message "Server unavailable". But when I'm pinging the server everything is fine. The same problem occurs when I try to open a remote connection. It takes about two minutes till the rdp client opens the remote window. Also when I try to access some shares (for example the dc with it's group policy files) it takes very long until the content is shown. I also get the standard gp error message: "The processing of Group Policy failed. Windows attempted to read the file \\share\Policies\{xy}\gpt.ini from a domain controller and was not successful. ...". When I try to access the share manually I have to try several times to get the share open. It seems to me as if the connection speed varies from time to time. After a few tries to refresh the group policy manually, the server answers an returns the current policies. Because I first thought there might be something wrong with my internet connection I tried the same with my notebook, which is running a windows xp, is in the same domain, is connected to the same lan and connects over the same VPN. Wondrously everything works fine on the notebook: outlook opens as expected, no gp errors and even the rdp client starts within seconds. I already tried several things to fix my problem but none of them worked. In the following a short list of counter measures already taken: - Changed MTU because the internet connection is only 2MBit - Add servers to hostfile - Installed latest firmware to the router Because I'm running out of approaches to solve the problem, any help would be greatly appreciated! Thanks in advance, Marko
November 3rd, 2010 6:50am

Hi Marko, Thanks for the post! According to your description, the issue is related to the Group Policy. I recommend you troubleshoot the group policy using event logs. Start the Event Viewer – Applications and Services Logs – Microsoft – Windows – Group Policy – Operational You can refer to Troubleshooting Group Policy Using Event Logs to figure out what are those logs meaning. Do you find Event ID 1058 in the logs? Please read this article Event ID 1058 – Group Policy Preprocessing (Networking), follow the steps to resolve the issue. In addition, the slow connection may also related to the networking problem, also check the Troubleshooting network connection problems. Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
November 5th, 2010 5:05am

Hi Miya, thank you very much for your response. I checked my event log again and found the error you described. But I'm wondering about the error code. My error code is different from the codes I found on the link you posted. I got the error code 1326: "Logon failure: unknown user name or bad password". But this sounds a little bit suspicous to me, because I didn't changed my username oder password and the credentials are working with every other machine in the domain. Is there something else what's causing this message? I had some other errors today. But I fixed these by reinstalling my network adapter, but perhaps there standing in relation with my group policy problem. The description of the error was: The server could not bind to the transport \Device\NetBT_Tcpip_{xy} because another computer on the network has the same name. The server could not start. and this one The password stored in Credential Manager is invalid. This might be caused by the user changing the password from this computer or a different computer. To resolve this error, open Credential Manager in Control Panel, and reenter the password for the credential username@domain I never changed my password in the last weeks and I also have cleared my credentials last friday. Does somebody have an idea, what is causing these problems? Best regards, Marko
November 7th, 2010 4:29pm

Hi Marko, we have here the same issue here on all our Win 7 machines. We're doing remote support to serveral customers via VPN and got problems to access our local recources after we opend the VPN connection. Everything takes longer or we dont get any access to the recources at all... We already tried a lot things (adding hosts to the machines, changed the settings of the VPN connections, removed teh RDP compression and so on... ) but nothing helped solving this problem. Your last post is already a vew days ago so it would be nice to hear if you still got the problem or if you maybe found a solution for it? Best Regards Markus
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 4:02am

Hi Markus, I didn't really solved the problem, but since we changed our domain controller the problem fortunately stopped occuring and everything just works nearly fine now. Do you already checked out all of the approaches mentioned in Miyas post? Did you check if your network adapter is causing the problem? The Win 7 feature media sense sometimes causes the problems named in this post. Try to disable this option if you haven't already done. See the following post for further instructions: http://social.answers.microsoft.com/Forums/en-US/w7desktop/thread/18277955-3f2c-4328-bd87-d3567579b645 If you already checked out these approaches send me a reply and I will try to get some more informations from our admin :). Cheers, Marko
January 28th, 2011 5:26am

Hi Marko, we maybee found a reason for the problem our domain here is a domain.de domain and the shares are enabled via \\domain.de it looks like Win7 is using the User and password from the VPN connection to access the shares after we opened the VPN connection. For example it works when we reconnect the shares with our correct Domain user instead of the user which opened the VPN connection. So we only need to find out how we can change the Win7 settings that he connects to the shares still witht our Domain user isntead of the VPN user which has no access rights. Here some other people with the same issue but no solution :( http://social.technet.microsoft.com/Forums/en/w7itprosecurity/thread/8c04838f-d648-49c2-89d7-672aba8ab75f http://social.technet.microsoft.com/Forums/en-US/itprovistanetworking/thread/879a166d-0f62-44a2-8dee-c20fc7227614/ Best Regards Markus
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2011 7:48am

Hi, did some more research and found finally a solution, one is a workaround and the other one will solve it. The Problem itself comes from Vista/Win7 which work different after you have a VPN connection open. WinXP for example always knew if you connect to a local recource or a remote recurce and used the correct credentials to connect to the recource. Vista and Win7 use always the credentials from the VPN network which causes problems if not everybody have access to the shares. It is possible to change a small parameter in the rasphone.pbk that the VPN credentials are not used so Vista and Win7 use the local credentials to acces the resources. Here is a small link to the solution: https://www.conetrix.com/Blog/post/Access-Domain-Resources-When-Connected-to-VPN.aspx#continue
January 31st, 2011 12:25pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics