The set up:
We have a Server 2008 R2 domain controller at a branch office, with two additional servers at different locations acting as Distributed File System servers. The branch office is connected to the main office using VPN.
Some users at the branch office are experiencing slow log ons, these are sporadic.
Primary domain controller at main office is running SBS 2011, no log on issues are reported here.
The following logs are from a machine at the branch office that’s experiencing log on issues.
These events always happen in this order.
1)Event ID: 6005
Source: WlcIntfy
The winlogon notification subscriber <GPClient> is taking long time to handle the notification event (CreateSession).
2) Event ID: 10
Source: WinMgmt
The description for Event ID '-1073741814' in Source 'WinMgmt' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'//./root/CIMV2', 'SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99', '0x80041003'
3)Event ID: 6006
Source: WlcIntfy
The winlogon notification subscriber <GPClient> took 143 second(s) to handle the notification event (CreateSession).
We have checked DNS and other services, the server itself is displaying no errors.
Can anyone point me in the right direction?