Cheshire-

Hi,

I've had a new Server 2003 R2 SP2 system placed in my care. Unfortunatly, this is a system a coop student was using a couple months back. I've enabled userenv.log through system services, and looking at the log, every time LUCOMS~1.EXE is called upon, it takes 30seconds to a minute for the system to keep continue with the logon process. Which isn't too bad until you see that for some reason LUCOMS~1.EXE is called ~7 times and every time takes an inordinate amount of time delaying the system.

Below is some excerpts from the userenv.log file:

--------------

USERENV(1c10.1e74) 10:24:36:753 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(1c10.1e74) 10:24:36:753 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(1c10.1e74) 10:24:36:753 LibMain: Process Name: \??\C:\WINDOWS\system32\winlogon.exe
USERENV(12b8.1ba4) 10:25:04:972 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\SescLU.exe
USERENV(12e0.13a0) 10:25:05:254 LibMain: Process Name: C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
USERENV(1d20.1390) 10:26:13:037 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\SescLU.exe
USERENV(1ae8.1fa8) 10:26:13:365 LibMain: Process Name: C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
USERENV(1c10.1e74) 10:26:55:991 LoadUserProfile: Yes, we can impersonate the user. Running as self

...

USERENV(1838.1544) 10:31:19:067 LibMain: Process Name: C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
USERENV(1098.1de8) 10:31:49:288 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\SescLU.exe
USERENV(1984.17b0) 10:31:50:195 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\luall.exe
USERENV(864.1188) 10:31:50:476 LibMain: Process Name: C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
USERENV(1fd0.860) 10:31:51:820 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(1f74.18e0) 10:31:54:133 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(1b24.190c) 10:31:54:836 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(7fc.1bc4) 10:31:57:445 LibMain: Process Name: C:\WINDOWS\system32\rundll32.exe
USERENV(260.4a8) 10:32:20:838 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\luall.exe
USERENV(1db0.1d10) 10:32:21:948 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(193c.1a28) 10:32:24:401 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(1258.1bd8) 10:32:25:057 LibMain: Process Name: C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
USERENV(d40.1260) 10:32:27:886 LibMain: Process Name: C:\WINDOWS\system32\rundll32.exe

-------------

Any help or suggestions would be great in rectifying the problem,
Ideally without having to uninstall / reinstall anything, but if that's the case, it'll have to do.

(And there seems to be something funny with the winlogon.exe and rundll32.exe unless they're expected to take that long)

Thank you sincerely,


-Aaron

Klint

What is this server used for #1 and have you tried reinstalling the antivirus suite on this machine?? It may be trying to access your AV Update server but can't find it, so it sits there and looks.

Cheshire-

The computer is primarily configured for managing the server lab environment we have setup. It has HP's RDP suite, (which includes Altiris), and HP SIM. With the exception of the Altiris, none of the network management programs are insisting they show up during user logon.

Klint

have you tried reinstalling the antivirus suite on this machine?? It may be trying to access your AV Update server but can't find it, so it sits there and looks.