So my boss is asking me to investigate a problem we're having.
Apparently, around 5 o'clock every day, all the computers slow down a lot, and screens more or less freeze. (Take these symptons with a grain of salt, I haven't experienced this first hand (not ever being here at 5PM), and they're not exactly being very clear with details.)
At first they said it was the server, but after looking through the system logs I can't find anything that even regularly occurs around 5, much less anything that looks suspicious or wrong. I then looked on the computers, and have found a few things that might be kind of suspicious.
I was wondering if anybody has had any experience with this kind of issue before.
1) I assume it's some sort of scheduled task, because it happens regularly at the same time.
2) After looking in the logs on the desktops, I've identified the following:
-Autoenrollment - Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted.
Enrollment will not be performed.
-Userenv - Windows saved user CINTT\efromm registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
-Userenv - Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted.
3) usually this lasts for at least an hour. Further searches through the logs have been unhelpful.
Any ideas?
Apparently, around 5 o'clock every day, all the computers slow down a lot, and screens more or less freeze. (Take these symptons with a grain of salt, I haven't experienced this first hand (not ever being here at 5PM), and they're not exactly being very clear with details.)
At first they said it was the server, but after looking through the system logs I can't find anything that even regularly occurs around 5, much less anything that looks suspicious or wrong. I then looked on the computers, and have found a few things that might be kind of suspicious.
I was wondering if anybody has had any experience with this kind of issue before.
1) I assume it's some sort of scheduled task, because it happens regularly at the same time.
2) After looking in the logs on the desktops, I've identified the following:
-Autoenrollment - Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted.
Enrollment will not be performed.
-Userenv - Windows saved user CINTT\efromm registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
-Userenv - Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted.
3) usually this lasts for at least an hour. Further searches through the logs have been unhelpful.
Any ideas?
