MS Logon slow with NT Server

tohhk · Post by **tohhk** » 2004-08-05 10:20

Realised that logon using MSLogon on NT Server is very slow compared to Windows 2000 Server.

Is there any way to speed up the logon on NT Server???

Marscha · Post by **Marscha** » 2004-08-05 14:35

Did you use the New MS-Logon (see [topic=339][/topic]).
I'll have a new version of this out the next days which will fix another design problem (multiple Windows logon attempts).

philodox · Post by **philodox** » 2004-08-05 15:29

is the ms logon supposed to work with windows 9x? if not, would it be possible to implement this?

Thanks,

.philodox.

tohhk · Post by **tohhk** » 2004-08-05 16:50

As stated by another user, the new MSLOGON does not work with NT. It fails with the error:

CheckTokenMembership not found in advapi32.dll

philodox · Post by **philodox** » 2004-08-05 17:43

in windows 9x with the settings as per the other thread I started on this I get the error 'VNC authentication failed!'

I havent yet tried it on an NT box, but that is good to know as the environment I am trying to implement this in has everything from Windows 95 to Windows XP.

I'd like to use group based authentication, but its looking more and more like a universal password might be the only way to go.

lenisham · Post by **lenisham** » 2004-08-05 18:46

I hate to break it to you but both Windows 9X and NT are no longersupported by MS and have security holes that will not be fixed. MS recommends upgrade. I do as well.

tohhk · Post by **tohhk** » 2004-08-06 01:57

Yes, I would love to upgrade all our machines to XP and Windows 2000 too. But as with philodox, we have Win9x to WinXP due to reasons like licensing issues, software compatibility problem etc....

Guest · Post by **Guest** » 2004-08-06 13:32

lenisham wrote:I hate to break it to you but both Windows 9X and NT are no longersupported by MS and have security holes that will not be fixed. MS recommends upgrade. I do as well.

oh really... thanks for the tip

My employer [the ministry of health] just joined with another ministry that has very outdated computers. We are in the process of upgrading, but as with anything in a government organization it is a slow process.

In addition as tohhk mentioned, there are some older legacy apps that need 9x or NT to run properly... obviously other solutions are being looked into... but I dont think Ontario would be very happy if OHIP [health insurance] all of a sudden 'crashed'.

philodox · Post by **philodox** » 2004-08-06 13:32

*sigh* that was me... I need to register one of these days

Marscha · Post by **Marscha** » 2004-08-06 14:09

see [post=1981][/post].
The original MS-Logon works also with Win9x, but has other limitations (namely that user and computer have to be in the same domain) which led me to start a new approach.

philodox · Post by **philodox** » 2004-08-06 14:57

thats great... all of my users are on the same domain... would I have to recompile the program to implement this?

I'll go have a look at that thread that you pointed out... thanks

philodox · Post by **philodox** » 2004-08-06 15:21

Hi Marsha,

I read the post that you linked to about the version of MS Logon that authenticates cross-platform... sounds interesting... where can I get this?

Thanks,

.philodox.

Marscha · Post by **Marscha** » 2004-08-09 06:33

see [topic=637][/topic]

philodox · Post by **philodox** » 2004-08-09 14:33

Martin,

I see the link to the install files for NewMSLogon and NewMSLogon2 there now... but my problem is not with authentication in NT or higher operating systems.

My problem is with authenticating on 9x systems. You mentioned that the 'old MS logon' should work with 9x... by this do you mean the one that comes with RC 18 by default? Or is this something else? The MS Logon that comes with RC 18 is not working on my 9x machines... if there is another 'old MS logon' that I should be looking at can you point me to it?

Thanks,

Jason

Marscha · Post by **Marscha** » 2004-08-09 14:49

Jason,

With "old mslogon" I refer to the mslogon that comes with RC18. There is also a little commandline utility in RC18 called testauth.exe which can help you to see what's happening.

Please try to run testauth on your Win9x machines so that you can provide more details on what exactly is not working.

Martin

Guest · Post by **Guest** » 2004-08-09 16:35

When I run testauth.exe on my Win9x computer and fill in 'user name', 'password', 'group' and answer 3 on the last option I get the following output:

Trying authlogonuser.dll
This only works on XP>
test is runnning as application and not a service
------------------------
------------------------
authlogonuser.dll not foundbased on authlogonuser.
Trying auth.dll
------------------------
------------------------
LoadLibrary( radmin32.dll ) failed, gle = 1157
based on auth.dll user has NO access Enter to quit

When I run the same test on my WinXP computer It finds my username in the group without problems.

When I check on the Win9x computer in regedit under HKLM\SOFTWARE\ultravnc\mslogon the group1 is set to the correct value [MOH-HELPDESK] and locdom1 is set to a value of 2. This is the same way that it is set up on my WinXP box.

When I try to connect to the Win9x computer I get prompted for a password and when I enter my username and password I get the message 'VNC authentication failed!'

philodox · Post by **philodox** » 2004-08-09 16:36

...that was me.

.philodox.

Marscha · Post by **Marscha** » 2004-08-10 06:22

Go to MS Knowledgebase article 142794 and "Download Microsoft Windows NT Server Management Tools (Nexus.exe) now" and install them. This provides you with the missing radmin32.dll, so the auth.dll based test should work.
According to your log, authlogonuser.dll is also not found. Make sure that this dll is in the ultravnc installation directory and start testauth.exe from this directory, i.e. first cd to this dir.
Hope this helps
Martin

philodox · Post by **philodox** » 2004-08-10 13:39

I will give that a try and see what happens. Strange that authlogonuser.dll was not found, I can see it in c:\Program Files\orl\vnc\
[my install directory]

Guest · Post by **Guest** » 2004-08-10 18:21

after installing the NT Server Management Tools I still get the same 'VNC Authentication Failed!' message... but it does take longer to come up

I ran a testauth and got the following:
Trying authlogonuser.dll
This only works on XP>
test is runnning as application and not a service
------------------------
------------------------
authlogonuser.dll not foundbased on authlogonuser.
Trying auth.dll
------------------------
------------------------
DOMAIN USERS
MOH-ISD-TORONTO
MOH-TMB-STAFF
TMB-DSG-YF
MOH-HELPDESK
MOH-TEMCLIENT
DOMAIN PRINTOPS
No Domain group found
AcquireCredentialsHandle failed with 80090311
Domain password check Failed
AcquireCredentialsHandle failed with 80090311
Local password check Failed
AcquireCredentialsHandle failed with 80090311
AcquireCredentialsHandle failed with 80090311
based on auth.dll user has NO access Enter to quit

I am testing on the MOH-HELPDESK group, which does show, but the 'No Domain group found' message is concerning. I have tried entering my username as 'DOMAIN/USERNAME' as well just in case and have rebooted in case the installed files needed that, but get the same result.

.philodox.

Marscha · Post by **Marscha** » 2004-08-11 08:49

OK, now auth.dll is working, but there seems to be some configuration problem...
The AcquireCredentialsHandle errormessage is "No authority could be contacted for authentication".
Maybe it's that to use MS Logon under Windows 95, Windows 98, and Windows Millennium Edition, you also have to enable the NTLM security services by opening Control Panel, Network, Access Control, and then selecting User-level access control.
If you also want to use ActiveDirectory for authentication you have to install ADSI for W98 to get it working (http://www.microsoft.com/ntserver/nts/d ... er/adsi25/).

philodox · Post by **philodox** » 2004-08-11 13:01

Well that worked!

Thanks for all the help

.philodox.

UltraVNC

MS Logon slow with NT Server

MS Logon slow with NT Server

Error with NT

MS Unspupported/security risk

Re: MS Unspupported/security risk