Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Taking a long time to logon


  • Please log in to reply
1 reply to this topic

#1 cheshire-

cheshire-

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:09:08 AM

Posted 31 December 2008 - 04:22 PM

Hi,

I've had a new Server 2003 R2 SP2 system placed in my care. Unfortunatly, this is a system a coop student was using a couple months back. I've enabled userenv.log through system services, and looking at the log, every time LUCOMS~1.EXE is called upon, it takes 30seconds to a minute for the system to keep continue with the logon process. Which isn't too bad until you see that for some reason LUCOMS~1.EXE is called ~7 times and every time takes an inordinate amount of time delaying the system.

Below is some excerpts from the userenv.log file:

--------------

USERENV(1c10.1e74) 10:24:36:753 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(1c10.1e74) 10:24:36:753 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(1c10.1e74) 10:24:36:753 LibMain: Process Name: \??\C:\WINDOWS\system32\winlogon.exe
USERENV(12b8.1ba4) 10:25:04:972 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\SescLU.exe
USERENV(12e0.13a0) 10:25:05:254 LibMain: Process Name: C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
USERENV(1d20.1390) 10:26:13:037 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\SescLU.exe
USERENV(1ae8.1fa8) 10:26:13:365 LibMain: Process Name: C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
USERENV(1c10.1e74) 10:26:55:991 LoadUserProfile: Yes, we can impersonate the user. Running as self

...

USERENV(1838.1544) 10:31:19:067 LibMain: Process Name: C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
USERENV(1098.1de8) 10:31:49:288 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\SescLU.exe
USERENV(1984.17b0) 10:31:50:195 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\luall.exe
USERENV(864.1188) 10:31:50:476 LibMain: Process Name: C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
USERENV(1fd0.860) 10:31:51:820 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(1f74.18e0) 10:31:54:133 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(1b24.190c) 10:31:54:836 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(7fc.1bc4) 10:31:57:445 LibMain: Process Name: C:\WINDOWS\system32\rundll32.exe
USERENV(260.4a8) 10:32:20:838 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\luall.exe
USERENV(1db0.1d10) 10:32:21:948 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(193c.1a28) 10:32:24:401 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(1258.1bd8) 10:32:25:057 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(d40.1260) 10:32:27:886 LibMain: Process Name: C:\WINDOWS\system32\rundll32.exe

-------------

(And there seems to be something funny with the winlogon.exe and rundll32.exe unless they're expected to take that long)

The system is used primarily to monitor network inventory, using HP RDP, Altiris, and HP SIM. (which is a bag of worms on it's own at the moment).

Any help or suggestions would be great in rectifying the problem,
Ideally without having to uninstall / reinstall anything, but if that's the case, it'll have to do.


Thank you sincerely,


-Aaron

BC AdBot (Login to Remove)

 


#2 Monty007

Monty007

  • Members
  • 1,151 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:11:38 PM

Posted 02 January 2009 - 05:09 PM

Hi,
If Symantec\LiveUpdate is taking to long as you have pointed out what do other servers run for anti-virus protection at your office? If they all use Symantec you may need to reinstall it. Any event log errors?
MCP
MSDST




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users