Microsoft KB Archive/832161

= You experience a delay when you use your Windows XP computer to log on to a domain or to connect to a network resource =

Article ID: 832161

Article Last Modified on 7/16/2007

-

APPLIES TO


 * Microsoft Windows XP Professional
 * Microsoft Windows XP Professional
 * Microsoft Windows XP Service Pack 1a
 * Microsoft Windows XP Tablet PC Edition
 * Microsoft Windows XP Professional x64 Edition
 * Microsoft Windows XP for Itanium-based Systems Version 2003

-



Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry



SUMMARY
''This article describes a problem where you experience long delays when you log on to the domain and when you open network shares. There are a variety of possible causes. These causes include problems with the WebClient service, problems with proxy settings, and problems with the server configuration.

One easy test that you can use is to turn off the client computer's WebClient service or the server's service that is listening to Transmission Control Protocol (TCP) port 80. If either of these workarounds resolves the problem, there are ways that you can re-enable these services and reduce the delay. Update to the latest service pack for Windows XP, bypass the proxy server for local servers, change the order of network providers so WebClient is the last provider, install any updates to the WebClient service, and then make adjustments to your Internet Explorer configuration.''



SYMPTOMS
When you use a computer that has an operating systems installed that is listed in the &quot;Applies to&quot; section, you may experience one or more of the following symptoms:
 * After you type your password at the logon screen, the computer may appear to stop responding (hang). This behavior occurs from the time when Group Policy is processed until the time that a blue screen appears, just before the desktop icons appear. This can last several minutes.
 * During the logon process, you see an &quot;Applying Computer Settings&quot; message for several minutes. However, you can log on the same computer quickly when the network connection is unplugged.
 * There is a long delay when you try to open a network share.
 * When you try to open a file that resides on a Distributed File System (DFS) share, it may take from 90 seconds to 15 minutes to open. However, you may be able to quickly open the same file by using the direct path of the file.
 * When you use Microsoft Internet Explorer 6 to access shares on a Microsoft Windows NT 4.0-based server or on a Microsoft Windows 2000-based server, access to the shares may appear to stop responding (hang).

Note You may gain access to the requested shares if you wait a long time, perhaps10 minutes or more.



CAUSE
In each of these symptoms, the computer must open a network share. The request to open the network share uses the Uniform Naming Convention (UNC) path \\ \ \ \. . The UNC location is first passed to the WebClient service. The WebClient service may try to connect to /. The WebClient service may try to use the Internet extensions for Windows to contact Web Distributed Authoring and Versioning (WebDAV)-enabled servers through the proxy server. The proxy server tries on port 80 to contact the destination server. One or more of the following causes delays in access to the share:  The WebClient waits for a response from the proxy server. The response may never be sent. If the response is never sent, there is a delay until the WebClient times out. The default for this delay is 10 minutes. If the destination server does not support HTTP on TCP port 80, or if the destination server is offline, the proxy server may not send the expected HTTP error code back to the WebClient. If there is a dead external DFS server reference on the proxy where the request is passed, the delay can be because of the timeout for the external DFS connection failure. The Network Provider Order lists Web Client Network before it lists Microsoft Windows Network. The domain controller that is used for authentication runs a service that listens on TCP port 80. For example, the domain controller is also an Exchange server with Outlook Web Access (OWA). Internet Explorer's proxy server settings are not configured as Bypass proxy for local addresses. Also, local intranet Fully Qualified Domain Names are not entered in the exclusion list.</li> The PATH statement variable contains a reference to a DFS link, such as the following:

PATH=\\corp.domain.com\dfsroot\DFSLink;C:\WINDOWS\system32;

</li></ul>

<div class="resolution_section">

RESOLUTION
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

As a quick test, try the steps in the &quot;Workaround&quot; section first. If the &quot;Workaround&quot; section resolves the issue, the issue was caused by the WebClient service. If the &quot;Workaround&quot; section does not resolve the issue, the issue is outside the scope of this article.

If one or more of your applications requires the WebClient service, and the &quot;Workaround&quot; section applies to the issue, use each method in the order presented until the behavior is resolved.

Method 1: Install the latest Windows XP service pack
To verify that you have Windows XP SP1 installed, follow these steps:
 * 1) Right-click My Computer, and then click Properties.
 * 2) On the General tab, under System, locate the service pack version.

For more information about how to obtain the latest service pack, click the following article number to view the article in the Microsoft Knowledge Base:

322389 How to obtain the latest Windows XP service pack

Method 2: Configure Internet Explorer to bypass the proxy server
To configure Internet Explorer to bypass the proxy server for local addresses, follow these steps:
 * 1) Start Internet Explorer.
 * 2) Click Tools, and then click Internet Options.
 * 3) Click the Connections tab, and then click LAN Settings.
 * 4) If the Use a proxy server check box is not selected, go to the next method.

If the Use a proxy server check box is selected, click to select the Bypass proxy server for local addresses check box.
 * 1) Click Advanced.
 * 2) In the Exceptions box, type the fully qualified domain names of all the local servers, and then click OK three times.

NoteYou can also configure Internet Explorer to bypass the proxy server by modifying the REG_BINARY field in the following registry key:. This registry entry will be present and will be used by the Webclient even when the Internet Options dialog and the  and   registry keys show that the proxy is disabled.

Method 3: Change the order of network providers

 * 1) On the desktop, right-click My Network Places, and then click Properties.
 * 2) On the Advanced menu, click Advanced Settings.
 * 3) On the Provider Order tab, in the Network Providers list, click Web Client Network.
 * 4) Press DOWN ARROW so that Web Client Network is the last provider in the list, and then click OK.

Alternatively, you can change the network provider order in the registry. The registry entry is. The default value of this entry is RDPNP,LanmanWorkstation,WebClient.

Method 4: Install the relevant hotfixes
If you installed Windows XP SP1 in Method 1, there is a more recent version of Webclient.dll available. For more information about installing the latest version of WebClient, click the following article number to view the article in the Microsoft Knowledge Base:

824383 Error message when you try to copy a file by using WebDAV to a WebDAV server from a Windows XP-based computer

After you install this fix, set the value of the ServerNotFoundCacheLifeTimeInSec registry entry. To do this, follow the steps in the &quot;Part 2&quot; section of the following Microsoft Knowledge Base article:

823372 Your Word documents take a long time to open when they have attached templates

Method 5: Adjust the installation of Internet Explorer
If you use the Internet Explorer Administration Kit to customize, deploy, and manage your installations of Internet Explorer 6, and if you have deployed Internet Explorer set on the .DEFAULT registry hive, you can use this method to resolve this behavior.

The WebClient service uses the .DEFAULT registry setting. Each WebClient request is sent to the proxy. The proxy request eventually times out.

When a Windows XP-based computer starts, it applies the computer policy file. <ol> The Multiple UNC Provider (MUP) is notified that the client has to connect to domaincontroller1.domain.com, or just a NetBIOS name of the logon server. Available redirectors are informed.</li> WebClient tries to handle the request.</li> WinInet loads and reads the proxy configuration from the registry:

ProxyEnable

ProxyOverride

ProxyServer

</li> If these three keys are set to use a proxy server, WinInet sends request to the proxy server. This may time out and fail. If it does, the WebClient service returns a negative response to the MUP.</li></ol>

In this case, you can work around by providing the domain controller NetBIOS name for the ProxyOverride value.

Note Depending on the name that is seen in the WebDAV request, this may also be the domain name for the internal domain.

The following is an example:

<pre class="fixed_text">   &quot;ProxyEnable&quot;=1 &quot;ProxyServer&quot;=&quot;http://ProxyServername:PortNumber&quot; &quot;ProxyOverride&quot;=&quot;*.intranet; domaincontroller1;*.domain.com;10.10.*; &quot;

In this example,  is the name of your proxy server, and   is the TCP port number for HTTP. The port number is typically 80 or 8080.

Note For the current user, the registry location is as follows:

The entries of the proxy exception list are stored in the ProxyOverride value. To add new values to this list, follow these steps:
 * 1) In Internet Explorer, click Tools, and then click Internet Options.
 * 2) Click the Connections tab, and then click LAN Settings.
 * 3) Click Advanced.
 * 4) In the Exceptions box, type the appropriate information.

Note You can see the values of these keys in a WinMSD report under Internet Settings in the Connectivity section of Internet Explorer. You can also use the Microsoft Internet Explorer Administration Kit (IEAK) to configure proxy server settings on client computers.

For additional information about IEAK, visit the following Microsoft Web site:

http://technet.microsoft.com/en-us/ie/bb219517.aspx

Note When a .pac file is used, WebDAV requests are generated if the .pac file includes the following:

<pre class="fixed_text">function FindProxyForURL(url, host)

{

} You can modify the .pac to avoid WebDAV traffic:

<pre class="fixed_text">function FindProxyForURL(url, host) {if (shExpMatch(host, &quot;DCNAME*&quot;)) { return &quot;DIRECT&quot;; }

<div class="workaround_section">

WORKAROUND
To work around this behavior, try either of the following solutions:
 * If it is possible, stop the service that listens on TCP port 80 on the domain controller or on the file server.
 * Disable the WebClient service on the Windows XP client.

To examine the status of the WebClient service on a WebDAV client computer, or to disable the WebClient service on a WebDAV client computer, follow these steps:
 * 1) Click Start, point to All Programs, point to Administrative Tools, and then click Computer Management.
 * 2) In the details pane, double-click Services and Applications.
 * 3) Double-click Services.
 * 4) Right-click WebClient, and then click Properties.
 * 5) Click the General tab.
 * 6) In the Startup type list, click Disabled.
 * 7) Click Apply, and then click OK.

Note You can disable the WebClient service as long as you do not have to modify or write files on Web Distributed Authoring and Versioning (WebDAV) servers.

Windows 2000 does not implement the WebClient service. By default, Windows Server 2003 has the WebClient service turned off. For more information about disabled services, click the following article number to view the article in the Microsoft Knowledge Base:

812519 Services that are turned off by default in Windows Server 2003

There are some alternatives to WebClient. If you are running Windows XP, follow these steps:
 * 1) Disable the WebClient service.
 * 2) Install a program that uses Web folders. For example, install Microsoft Office XP or a later version.
 * 3) Delete your original network place.
 * 4) Create a new network place.

For more information about WebDAV and WebClient, click the following article number to view the article in the Microsoft Knowledge Base:

817929 Files do not appear when you use Web Distributed Authoring and Versioning (WebDAV) to add a network place shortcut to a Windows SharePoint Services Web site

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

<div class="moreinformation_section">

MORE INFORMATION
The WebClient service enables Windows-based programs to create, access, and modify Internet-based files using Win32 APIs. If this service is stopped, these functions are not available.

Turning off WebClient service stops the WebDAV redirector. You will not be able to use command-line commands such as net use, dir, copy, and rename to a Web server. You cannot use Add Network Place to add a Web DAV location. You cannot use Publishing Wizard to publish to MSN Communities. However, you can still continue to use servers that support the Server Message Block (SMB) protocol.

In Windows XP and later versions, the Windows file redirector has a built-in WebDAV client. Microsoft Office 2000 and Microsoft Office XP and Microsoft Office System 2003 have built-in WebDAV redirectors that work independently from the WebClient service.

Windows XP WebDAV Redirector
Windows XP includes the new WebDAV redirector component. With the WebDAV redirector component, programs that run on Windows XP can connect to the Internet, and can natively read and write data on the Internet. The WebDAV protocol is an extension to HTTP that lets data be written to HTTP targets such as the Microsoft MSN Web Communities. The WebDAV redirector provides file system-level access to these servers like the existing redirector provides access to SMB and Common Internet File System (CIFS) servers.

One way that you can access a WebDAV share is to use the net use command. For example, you can use the following command at the command prompt: NET USE * http://webserver/davscratch

To connect to an MSN Community, use http://www.msnusers.com/ /files/ as the target. The credentials you must use are your Microsoft .NET Passport credentials. Enter these details in the Connect Using Different User Name dialog box if you are using a mapped network drive, or use the /u: switch with the net use command. For example, you can use the following command at the command prompt: NET USE http://www.msnusers.com/ /files /u: @hotmail.com

Windows XP
The WebClient service is used if you connect a Web Folders without specifying a port. For example, if you use the &quot;http://webserver/davscratch&quot; URL, a network trace shows something that is similar to the following in the HTTP header: <pre class="fixed_text"> HTTP: User-Agent = Microsoft-WebDAV-MiniRedir/5.1.2600

Microsoft Office
When you use the syntax that includes a port number, you connect with Office WebDAV. For example, if you use the &quot;http://webserver:80/davscratch&quot; URL, a network trace shows something that is similar to the following:

<pre class="fixed_text">HTTP: User-Agent = Microsoft Data Access Internet Publishing Provider DAV

Note This may or may not show as &quot;HTTP&quot; traffic in Network Monitor because the proxy port can vary.

URLScan blocks WebDAV requests
To learn more about URLScan, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/tools/urlscan.mspx

Registry setting for timeouts
The WebClient service maintains a list of non-DAV servers (negative cache) that have been contacted in the last 60 seconds. If the server is found in this list, a fail is returned immediately without going on the network. The time a server remains in this list can be modified by changing the value of the ServerNotFoundCacheLifeTimeInSec registry entry.

Note If the  registry entry does not exist, create the entry.

Type: REG_DWORD

Value: Default 60 (Decimal)

No maxium and no minimum value

RequestTimeoutInSec represents the number of seconds that WebDAV waits for WinInet after issuing a request such as “Get file” or “Put file.”

Type: REG_DWORD

Value: Default 600 (Decimal)

<div class="references_section">