Do you have correct subnet associated with each site in dssite.msc?
On a problematic client machine, run "set l" after it took 20 mins plus time
to logon, and post the result back. Thanks
--
HTH
Marty


"Anthony" wrote:

> Hello. I hope someone can help with the issues I have.
> Im having problems with machines taking up to 20 minutes to logon to the
> network, this does not affect all machines just random ones.(most machines)
> We have used a network sniffer to look at the traffic from the client
> machines and for some reason the client authenticates fine with the local
> domain controller, and know which site it is in, but then goes off talking
> to
> other domain controllers around the world in other sites. Im not sure if
> this
> is when it is trying to pull down the group policy, does anyone know why
> this
> would happen?
> Also if I ping my domain name the reply changes every so often, and its
> always from a DC in another country site, if we add a host entry for the
> local DC to the domain name it fixes the issues on some machines.
> Also on almost all machine I get the error in the event log "The Security
> System could not establish a secured connection with the server
> DNS/blah.blah.blah.com. No authentication protocol was available."
> What does this mean?
>
> I know that's all a bit random so any help would be appreciated.
>
> Thanks
>
>