Why am I seeing LsaSrv 45058 events on my client?

From Julio: I recently installed a new server running Windows 2008 R2 (as a DC) and the related computers running Windows 7 Pro. The computers are joined to the domain. In a computer, which is shared by two users (userA and UserB), I see the following event on the Event Viewer while userA was logged…


Debunking Slow Logon Myths

Over the years, the following three causes for slow logons have been mistakenly identified as being relevant for improving logon speed on Windows clients. Deleting your cached roaming profile.This will most likely do nothing or even make your logon slower if the profile is excessively big and needs to be pulled down from the server…


Cheat sheet for Smartcard Redirection on W2k8 R2 RDP servers

Available Updates for Remote Desktop Services (Terminal Services) in Windows Server 2008 R2http://support.microsoft.com/kb/2601888 Latest BaseCSP.DLL (as of April 2012): You may wait for up to 30 seconds when you use a smart card to unlock a computer that is running Windows 7 or Windows Server 2008 R2http://support.microsoft.com/kb/2577550   Latest Winscard.dll (as of April 2012) A…


PreferLogonDC issues on W2k8 R2 DC’s

A hotfix has recently been issued that resolves an issue where the Windows 7/Windows 2008 R2 client “forgets” its dynamic site name during the startup sequence. The net effect of this being that the client always makes additional generic DNS queries which return non-site specific DC names back to the client.  The DC returned from the DNS…


Cached logons and CachedLogonsCount

A co-worker of mine had a case with the following description: We’ve set the CachedLogonsCount registry value to 1 on our workstations because we want to limit the number of cached user logons in the LSA cache on the system.However, this seems to have the side-effect of sometimes making it impossible for the user to log on to the laptop…


The return of PAC-mania [AKA some reasons why PAC verification can fail]

There’s tons of good stuff out there on Kerberos PAC verification – but with current trends showing an increase in incoming cases related to this type of issue I though it would do me good to brush up on this and link the most relevant articles together. In short; PAC verification is the process where…


Massaging the XP registry for logon performance

There are two registry settings on Windows XP clients that have been observed to be key catalysts for slow boot/slow logon scenarios (also referred to as SBSL).   On the Windows XP side (SP3 must be present on all clients):   Turn on opportunistic locking on the XP clients: – Review http://support.microsoft.com/kb/319440 and set the registry…


Credential Providers simplified pt1

GINA is dead…. the main reason is the fact that having more than one GINA on a system was difficult.  Yes, chaining multiple GINA DLL’s was a possibility but it really required at least one of the GINA providers to be aware of the other and trying to chain 3 different GINAs was still cumbersome….


Can’t find script engine "VBScript" for script after installing MS10-020

Summer is here and support volumes trickle down to a minimum as people jump into their SUV’s and drive off into the wild blue yonder.Having said that I encountered the following interesting issue:   We installed the fix from KB 981332 on a Windows 2008 R2 server and after that we’re not able to run any VBS script.   When…


The caveats of using Group Policy Preferences on Terminal Servers

 Note: this entry is about the Group Policy Preferences component and one aspect of it (which is resolved in later hotfixes or service packs) – for a more generic entry that describes troubleshooting slow logons in general see http://blogs.technet.com/b/instan/archive/2008/04/17/troubleshooting-the-intermittent-slow-logon-or-slow-startup.aspx.The GPPref component is an extension to the Group Policy functionality on Windows systems that is available…