Problem: Slow Intranet Sites/Internal DNS Resolution for only AD Users

Hello,
We are experiencing a very odd problem.
Any and All Active Directory users are experiencing very slow intranet sites.
We are a school corporation, so this is affecting our Student Information System, as it is entirely web-based and locally hosted.
All of our Domain Controllers are Windows Server 2012 R2, with all the latest critical updates.
All client workstations are Windows 8.1 Professional.
The problem occurs with ALL web browsers (IE, Chrome, FF, etc)
All DNS queries respond in <1 ms (no matter whether we are logged in as AD User or local computer user).
If we login as local computer user, we have blazing fast intranet sites/DNS resolution.
If we login as AD user, everything crawls again... every click on the intranet site spins and says loading for up to 15 seconds.
If we add the the intranet site to the local computer HOST file, it is blazing fast, just as if we logged on as local computer user.
If we take it back out of the HOST file, it drags again.
I am totally stumped!
Any help is appreciated.
Thanks!

Hi,
How are DNS settings configured?
If there are any public DNS IP addresses in Preferred or Alternate field, please remove them, then input these DNS entries in the Advanced section. We should only configure Domain Controllers’ IP addresses on Preferred
and Alternate DNS server section for domain-joined machines.
More information for you:
Active Directory’s Reliance on DNS, and using an ISP’s DNS address
http://blogs.msmvps.com/acefekay/2009/08/17/ad-and-its-reliance-on-dns/
Best Regards,
Amy

Similar Messages

500 internal server error for only single user

Hi Experts,
Pls help me that
I am getting the problem of 500 Internal server error for a single user .
Except that user remaining users are not getting this error, They are working fine
i.e it is ESS & MSS Package all other application working fine , this iview came from Webdynpro .
Regards
Krishna

Hi Arun,
where can i check with that whether in DEV/PROD system...?
I don't have access to PROD system and SU01 system too.
Can you please guide me with the steps to get it done.
Please check the below log which is getting displayed for the User, when he is logging in.
Error summary
While processing the current request, an exception occurred which could not be handled by the application or the framework.
If the information contained on this page doesnu2019t help you to find and correct the cause of the problem, please contact your system administrator. To facilitate analysis of the problem, keep a copy of this
Root Cause
The initial exception that caused the request to fail, was:
com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: ComponentUsage(FPMConfigurationUsage): Active component must exist when getting interface controller
at com.sap.tc.webdynpro.progmodel.components.ComponentUsage.ensureActiveComponent(ComponentUsage.java:773)
at com.sap.tc.webdynpro.progmodel.components.ComponentUsage.getInterfaceControllerInternal(ComponentUSage.java:348)
at com.sap.tc.webdynpro.progmodel.components.ComponentUsage.getInterfaceController(ComponentUsage.java:335)
at com.sap.pcuigp.xssfpm.wd.wdp.InternalFPMComponent.wdGetFPMConfigurationUsageInterface(InternalFPMComponent.java.245)
at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPM.changeToExceptionPerspective(FPMComponent.java:862)
u2026 59 more
Please provide me any help.
Thanks in advance.
Regards,
Ponneswari A.

Critical Issue - 500- Internal Server Error for request in User's Inbox

Hi,
We have developed and deployed SOA composite and custom task flow (For Customized Email notifications).[30.7.1.1 Creating a Task Flow with a Router - http://docs.oracle.com/cd/E23943_01/dev.1111/e10224/bp_designtf.htm#SOASE744]
When a request is generated it goes for an approval. In Approver's inbox in identity console you can see request is pending. When Approver clicks on that link to see request details error is displayed - "500- Internal Server Error "
In OIM logs I can see this:
oracle.adf.controller.ControllerException: ADFC-02001: The ADF Controller cannot find '/WEB-INF/oracle/iam/ui/soa/tfs/remote-taskdetails-tf.xml'.
        at oracle.adfinternal.controller.metadata.provider.mds.MdsMetadataResourceProvider.getMetadataObjects(MdsMetadataResourceProvider.java:466)
        at oracle.adfinternal.controller.metadata.provider.mds.MdsMetadataResourceProvider.loadUnmutalbeMetadataResources(MdsMetadataResourceProvider.java:367)
        at oracle.adfinternal.controller.metadata.provider.mds.MdsMetadataResourceProvider.getResources(MdsMetadataResourceProvider.java:179)
        at oracle.adfinternal.controller.metadata.MetadataServiceImpl.getTaskFlowDefinition(MetadataServiceImpl.java:209)
        at oracle.adfinternal.controller.util.SecurityUtils.invokeURLAllowed(SecurityUtils.java:33)
        at oracle.adfinternal.controller.engine.ControlFlowEngine.invokeTaskFlow(ControlFlowEngine.java:210)
        at oracle.adfinternal.controller.application.RemoteTaskFlowCallRequestHandler.invokeTaskFlowByUrl(RemoteTaskFlowCallRequestHandler.java:99)
        at oracle.adfinternal.controller.application.RemoteTaskFlowCallRequestHandler.doCreateView(RemoteTaskFlowCallRequestHandler.java:64)
        at oracle.adfinternal.controller.application.BaseRequestHandlerImpl.createView(BaseRequestHandlerImpl.java:57)
        at org.apache.myfaces.trinidadinternal.application.ViewHandlerImpl.createView(ViewHandlerImpl.java:95)
        at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._restoreView(LifecycleImpl.java:831)
        at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:422)
        at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:207)
        at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)
        at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
        at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
        at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
        at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adf.share.http.ServletADFFilter.doFilter(ServletADFFilter.java:71)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:128)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
        at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177)
        at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.bpel.services.workflow.client.worklist.util.WorkflowFilter.doFilter(WorkflowFilter.java:175)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.bpel.services.workflow.client.worklist.util.DisableUrlSessionFilter.doFilter(DisableUrlSessionFilter.java:70)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:180)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
        at java.security.AccessController.doPrivileged(Native Method)
        at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324)
        at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:460)
        at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
        at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
        at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:163)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
        at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
        at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
        at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
        at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
        at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Caused by: oracle.mds.core.MetadataNotFoundException: MDS-00013: no metadata found for metadata object "/WEB-INF/oracle/iam/ui/soa/tfs/remote-taskdetails-tf.xml"
        at oracle.mds.core.MetadataObject.getBaseMO(MetadataObject.java:1408)
Screenshot of Error in Inbox:
This is critical issue for us and is showstopper for Go-Live. So any kind of help is highly appreciated.
Thank you,
Tanmay

If its Java only error then there wont be any dump in ST22.
Strange issue for you, in general if we get 500 error, there should be details of it in the same page.
You said this issue is occuring for only one user, is it getting replicated every time?
You are also seeing the same error when u login as that particular user?
Do one thing, assign him the Content Admin role and then do the preview of this iView form content admin and see if ur still seeing this error.
Regards
Yugandhar Reddy

Program installed for only one user

Have a program that is installed for only one user, how can I get another user access to the software? don't have install disk.
Thanks

Select the application's icon then Press COMMAND-I to open the Get Info window. In the Ownership and Sharing section check the owner and group assignments. If they have owner=you and group=you or staff, then you must change those. Open the Terminal application in the Utilities folder and enter the following command line at the prompt:
sudo chown -R root:admin
Put a space after "admin' then drag the application's icon into the Terminal window and press RETURN. You will be prompted for your admin password which will not be echoed.
This should enable other users to access the application provided you have given the user access via their managed account preferences in Accounts preferences.

Filter base on CallerID to VM for only 1 User

Hi
CM4.0.2sr2a - Can I Filter base on CallerID to VM for only 1 User.
Reason: This user gets constant sales calls from certain vendor that they recognize the callerID and don't want to answer their calls but rather have it go to VM

perhaps you can setup a phone template that has an "idivert" button where if the user sees an incoming number they don't want to answer, they can just press the 'idivert' button and the call goes straight to voice mail.
see the following link for more info:
http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_administration_guide_chapter09186a00801ed115.html

Internal DNS resolution issue - almost all external sites working

I administer an Xserve running 10.5.8 Server. This client is running internal DNS due to a few internal services (iChat, mail, VPN, etc) - but his website, of the same domain, is hosted externally at a hosting provider. This is where I'm running into odd problems. For examples:
ichat.company.com - 10.0.1.100 (when inside the network, also has FQDN on Internet)
mail.company.com - 10.0.1.100 (same as above)
www.company.com - xxx.xxx.xxx.xxx (the actual public IP address of the web server at the host)
Do I need to do it this way? If I don't define the "www" record internally, and point it to the external IP of the hosting provider for the website, the clients inside the network can't see the website, because the internal domain services aren't answering the "www" question and won't hand off to the internet records. It's frustrating because every time the client has a subdomain added to his website, i have to add a record on his internal DNS or it won't resolve at his office. example:
newdomain.company.com - xxx.xxx.xxx.xxx (public IP of the web host, or it fails)
Is there a way to have internal DNS for a domain answer most but not all questions for the domain?
- Bill

Just as an aside, you could potentially setup a subdomain for the internal systems, e.g. 'corp.company.com' and setup the internal services in this domain - ichat.corp.company.com, mail.corp.company.com, etc.
Then to get to the internal systems users use those .corp.company.com hostnames and the rest of .company.com gets sent upstream.
It may or may not be sufficient for your needs. This kind of model works well for static users that only work in the office but may not work so well for mobile users.

Internal DNS Resolution

What InkMaster said - you HAVE to use internal DNS to resolve internal systems, no external DNS server will ever work. Either don't use the external ones, or use them on your DNS server as forwarders.
Many DNS tools will tell you what server is quickest at resolving external names, and has no relevance to internal systems.

I currently have a dilemma with our internal DNS servers. I ran namebench and the recommended configuration is as follows:
Primary Server: 4.2.2.2
Secondary Server: 209.244.0.3
Tertiary Server: 192.168.30.54
I changed the DNS settings on my workstation but now I am unable to resolve internal addresses. Our DHCP server is handing out 192.168.30.53 and 54 as DNS servers. If I change the DNS settings on the DHCP server to the above recommended, internal users will not be able to resolve internal addresses. Is there a work around for this? I noticed a huge difference in browsing speed when using the recommended settings from namebench. Any help would be greatly appreciated. Thanks!
This topic first appeared in the Spiceworks Community

ICal alerts not working for only one user

My main user account stopped giving me iCal alerts. I can switch to another user and my test alert works. I've found a lot of information online but most seems to be for older versions of iCal. I have gone into ~user/Library and removed everything related to iCal. I even managed to finally delete the home calendar that seemed to re-appear. I managed to start with a clean calendar but no alerts. Is there an alert plist file that could be the culprit? I've done a global search in Terminal for anything under ~User/Library with "alert" or "notification" in the filename but can't find anything. I hate to rebuild an entire account again.

It seems someone has set the user policy at webapplication level for that user.Check the similar thread below
http://social.msdn.microsoft.com/Forums/es-ES/18b4f019-093d-45f6-92b7-8350d13bd663/let-us-know-why-you-need-access-to-this-site-why-do-i-see-this-error-and-who-will-give-access?forum=sharepointgeneral
My Blog- http://www.sharepoint-journey.com|
If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

Burn a CD or DVD for only one user!

Hi,
How can I burn a CD or DVD that only my user can read?
I go to backup my personal informations and want to sure that no other people have access to this CD.
I use the Toast Titanium 7.1.2, but if other software can do this, I can buy it!
Thanks to all!
G4 Quicksilver, Cube and G5 Mac OS X (10.4.8)

Hi,
Thanks to all. But now, I see some thing that make this idea of a disk image, not good. Lets say, that I burn a DVD with a disk image inside the DVD. If I get, just a little risk on de DVD, I lost all the informations. If I dont use a disk image, I lost only the information, in that little risk. And because I go use this as a backup, this problem with security is a problem.
So, if somebody know another way, to burn a DVD, that only my user have access, please, let me know.
Thanks
Paulo
G4 Quicksilver, Cube and G5 Mac OS X (10.4.8)

Authorization Policy for only search users

Hi all,
I need create a custom authorization policy for only search all users in create request. The users can't see any profile information of others users.
Anyone can help me ?
Regards,
Joel

ViewUser Admin Role can search and view users by default. Since the OES policies for this admin role has action as ViewSearch Entity. In your case, you can write EL's to hide Admin tab which will hide Admin ltab links based on current logged-in user profile.
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/uicust.htm#BABHBFGH

Exportto excel in tcode MCAF results in program termination for only 1 user

Hi,
The user is trying to export data from MCAF into a local file. This action results in program termination, its only for his user id. It works for all the user ids the basis guys had a look at it and they said everthing is ok on the authorization side. Im confused, please let me know...
Thanks,
Sukumar.

Thanks for the quick reply!!!
Error analysis
The system tried to access field "OE_OBJEKTTEXT" with type "C" and length
60 in the current program "RMCY9110 " using offset 71.
Partial field access is not allowed with an offset specification that is
larger than actual field length.
How to correct the error
Make the offset smaller with which you want to access the field.
If the error occurred in an ABAP program of your own or an SAP program
that you modified, try to correct it.
If the error occurred in a non-modified SAP program, you may be
able to find a solution in the SAP note system.
If you have access to the note system yourself, use the following
search criteria:
"DATA_OFFSET_TOO_LARGE"
"RMCY9110 " bzw. "RMCS0F0O "
"OBJEKTTEXT_ERMITTELN"
Thanks,
Sukumar.

Firefox crashes for only one user on startup, even after reset; safe mode OK.

Current crashes do not even produce crash reports, but two crashes from earlier today did yield:
bp-7013aded-0644-47d8-9967-b48a12141013
bp-cb495f8f-7ae2-4b48-86ff-63b6f2141013
Starting in safe mode shows the same installed plugins and two extensions that are enabled in profiles for other users on this system. It is only this user's Firefox that crashes on startup, even after a reset.
Have also uninstalled and re-installed Firefox. Again, it crashes on startup only for this user.
Windows event viewer does have several entries for an Application Error:
Faulting application name: plugin-container.exe, version: 32.0.3.5379, time stamp: 0x54224e6b
Faulting module name: mozalloc.dll, version: 32.0.3.5379, time stamp: 0x54221b67
Exception code: 0x80000003
but it's not clear that these entries sync up with the crashes.
This crashing on startup began this morning; no new software or any other system modifications (that I'm aware of) for several weeks now.

The hardware acceleration setting appears to be the culprit. After unchecking the Tools > Options > Advanced > General > Browsing: "Use hardware acceleration when available" setting, Firefox no longer crashes on startup.
Initially I'd glossed over this setting since it isn't an issue for any of the other users on this system. I'm still puzzled as to why this would be an issue only for this user, and what had changed as of this morning that set it off, but obviously there's something about their configuration which triggers this situation, even for the default plain vanilla Firefox profile!
Thanks, cor-el!

HT1379 My computer I-mac is running super slow. If I zap the PRAM it goes back to running well , briefly... a few hours, then back to super slow. What is the resolution for this problem? I have a Time machine that does back up well.

My computer is running super slow. I can correct the problem briefly by zapping the PRAM but is resumes as a problem after a few hours. I have good time machine (capusle) backup daily. I have done a disk verify and there doesn't appear to be anything wrong there.
Help, this is wasting a lot of time to do simple functions.

Hard to say what's going wrong without more information. Try the troubleshooting steps in my Mac Performance Guide. Post back if you need help with any of that or questions about the results.

Reason: 5.3.0 - Other mail system problem ('550', ['non-existent reverse DNS entry for X.X.X.X

We have configured a ESA for a customer whose appliance was broken down because of a software problem and being replaced with a new one by cisco.
Today we have a big problem about Reverse DNS. When they send email to their customers, the remote mail servers reject their messages. I double check the configuration and haven’t found anything. If we route mail traffic over exchange instead of ironport, there aren’t any problem. The broken device worked about 6 months without being connected. Also, the remote server sends a message like:
Diagnostic information for administrators:
Generating server: mail.xyz.com.tr
[email protected]
[89.19.0.217] #<[89.19.0.217] #5.0.0 smtp; 5.1.0 - Unknown address error 554-'This server requires PTR for unauthenticated connections.' (delivery attempts: 0)> #SMTP#
Has anyone come across this type of problem or error code?

Please check the IP address from which the mail is being delivered to the remote server. This address might differ when the mail is routed through the exchange and through IronPort.
Most probably, the issue could be because of PTR record of the IP address( that IronPort is using to send the mail) is not registered in the DNS or it is not matching with the domain name. Was there any change in the Network configuration on the new ESA compared to the broken down ESA?

Macbook pro 13inch running slow and losing connection (had it for only a year)

Will someone please help me.. I've only had my mac book pro for a year only and few months ago I started experiencing that my macbook has been running slow lately.. I still have alot of memory in it because I only use it for browsing the net and saving some pictures on it and some videos and it. I have another laptop with me(Toshiba) and it works perfectly fine.. Honestly, I didn't switch to apple to get this kind of issues! Will someone help me please.. I seriously don't want to pay $50 just for them to trouble shoot it.. & I'm not the only one experiencing this problem... Alot of people I know that uses macbook are experiencing the same issues. I hope someone can help me, Thanks!

Post a panic log so that we can see exactly is going on. Be sure that it includes the hardware profile at the bottom of the log.

Problem: Slow Intranet Sites/Internal DNS Resolution for only AD Users

Similar Messages

Maybe you are looking for