Article ID: 928576 - View products that this article applies to.
Expand all | Collapse all

On This Page

INTRODUCTION

New performance counters are available for Microsoft Windows Server 2003. These performance counters let you use System Monitor to monitor the performance of Netlogon authentication. To enable this feature, you must install the update that is described in this article.

For more information about scenarios that the Netlogon performance counters can be useful, click the following article number to view the article in the Microsoft Knowledge Base:
975363 You are intermittently prompted for credentials or experience time-outs when you connect to Authenticated Services

For more information about how to use the Netlogon performance counters to set the best MaxConcurrentApi value, click the following article number to view the article in the Microsoft Knowledge Base:
2688798 How to do performance tuning for NTLM authentication by using the MaxConcurrentApi setting

MORE INFORMATION

Scenarios in which you might use the Netlogon performance counters

On a server that is running Microsoft Internet Security and Acceleration (ISA) Server, the Netlogon.log file may display the following information:
Time [LOGON] SamLogon: Network logon of DomainName\UserName from WorkstationName Returns 0xC000005E
The 0xC000005E error code corresponds to a STATUS_NO_LOGON_SERVERS error. This error indicates one of the following situations:
  • A network outage has occurred.
  • The local domain controller has not responded to the authentication request within 45 seconds.
To troubleshoot this problem, you can perform a two-way network traffic trace to determine whether the error is related to one of these situations. If the local domain controller is too busy, you can adjust the load on the domain controller. Or, you can adjust the number of remote procedure calls (RPC) to the local domain controller by using the MaxConcurrentApi registry entry. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
326040 How to configure an ISA Server computer for a very large number of authentication requests
However, the local domain controller may be waiting for another remote domain controller to authenticate a user account that is in a remote domain. In this case, the local domain controller becomes the remote procedure call (RPC) client to the remote domain controller. The delay may be caused by the remote domain controller instead of by the local domain controller.

For example, assume that domain A has a domain controller that is named DC_A. Domain B has a domain controller that is named DC_B. A user in domain B uses NTLM to log on to the ISA Server computer in domain A. In this situation, the ISA Server computer sends a user authentication request to DC_A. DC_A forwards the user authentication request to DC_B, because DC_A does not have the user data for domain B.

In this example, both DC_A and DC_B may be potential bottlenecks. Additionally, the primary domain controller (PDC) emulator determines incorrect passwords. Therefore, DC_B may also have to contact the PDC emulator in domain B to check whether the user has entered an incorrect password.

The Netlogon performance counters help you determine which domain controller is the bottleneck. For example, you can use the Semaphore Waiters counter and the Semaphore Timeouts counter to determine whether the bottleneck is on a remote domain controller.

How to use the new Netlogon performance counters

To use the new Netlogon performance counters, follow these steps:
  1. Click Start, click Run, type perfmon.msc, and then click OK.
  2. In the details pane, click the Add button. The Add button appears as a plus sign (+).
  3. In the Performance object list, click Netlogon.
  4. In the Select counters from list list, click the performance counter that you want to add.
  5. Click Explain to display the explanation for the selected performance counter.
  6. Click Add, and then click Close.

Explanations for the new Netlogon performance counters

Five performance counters are available in the Netlogon performance object. The following table lists the names and explanations for these performance counters.
Collapse this tableExpand this table
Performance counterExplanation
Semaphore WaitersThe number of the thread that is waiting to obtain the semaphore
Semaphore HoldersThe number of the thread that is holding the semaphore
Semaphore AcquiresThe total number of times that the semaphore has been obtained over the lifetime of the security channel connection, or since system startup for _Total
Semaphore TimeoutsThe total number of times that a thread has timed out while it waited for the semaphore over the lifetime of the security channel connection, or since system startup for _Total
Average Semaphore Hold TimeThe average time (in seconds) that the semaphore is held over the last sample.

Update information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=support
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this update, you must have Windows Server 2003 Service Pack 1 or Windows Server 2003 Service Pack 2 installed. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
889100 How to obtain the latest service pack for Windows Server 2003

Restart requirement

You must restart the computer after you apply this update.

Update replacement information

This update does not replace any other updates.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows Server 2003 with Service Pack 2, x86-based versions
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformSP requirement
Netapi32.dll5.2.3790.4106345,60027-Jun-200709:37x86SP2
Netlogon.dll5.2.3790.4106436,73627-Jun-200709:37x86SP2
Nlctrs.hNot applicable61524-May-200711:08Not applicableSP2
Nlperf.dll5.2.3790.410624,57627-Jun-200709:37x86SP2
Nlperf.iniNot applicable1,44629-May-200708:52Not applicableSP2
Windows Server 2003 with Service Pack 2, x64-based versions
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Netapi32.dll5.2.3790.4106603,64826-Jun-200722:58x64SP2Not applicable
Netlogon.dll5.2.3790.4106689,15226-Jun-200722:58x64SP2Not applicable
Nlctrs.hNot applicable61526-Jun-200722:58Not applicableSP2Not applicable
Nlperf.dll5.2.3790.410623,55226-Jun-200722:58x64SP2Not applicable
Nlperf.iniNot applicable1,44626-Jun-200722:58Not applicableSP2Not applicable
Nlctrs.hNot applicable61526-Jun-200722:58Not applicableSP2Not applicable
Nlperf.dll5.2.3790.410623,55226-Jun-200722:58x64SP2Not applicable
Nlperf.iniNot applicable1,44626-Jun-200722:58Not applicableSP2Not applicable
Nlctrs.hNot applicable61526-Jun-200722:58Not applicableSP2Not applicable
Nlperf.dll5.2.3790.410623,55226-Jun-200722:58x64SP2Not applicable
Nlperf.iniNot applicable1,44626-Jun-200722:58Not applicableSP2Not applicable
Wnetapi32.dll5.2.3790.4106345,60026-Jun-200722:58x86SP2WOW
Wnetlogon.dll5.2.3790.4106436,73626-Jun-200722:58x86SP2WOW
Wnlperf.dll5.2.3790.410624,57626-Jun-200722:58x86SP2WOW
Windows Server 2003 with Service Pack 2, Itanium-based versions
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Netapi32.dll5.2.3790.4106905,72826-Jun-200722:56IA-64SP2Not applicable
Netlogon.dll5.2.3790.4106989,18426-Jun-200722:56IA-64SP2Not applicable
Nlctrs.hNot applicable61526-Jun-200722:56Not applicableSP2Not applicable
Nlperf.dll5.2.3790.410637,88826-Jun-200722:56IA-64SP2Not applicable
Nlperf.iniNot applicable1,44626-Jun-200722:56Not applicableSP2Not applicable
Wnetapi32.dll5.2.3790.4106345,60026-Jun-200722:56x86SP2WOW
Wnetlogon.dll5.2.3790.4106436,73626-Jun-200722:56x86SP2WOW
Wnlperf.dll5.2.3790.410624,57626-Jun-200722:56x86SP2WOW
Windows Server 2003 with Service Pack 1, x86-based versions
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformSP requirement
Netapi32.dll5.2.3790.2962350,20827-Jun-200712:39x86SP1
Netlogon.dll5.2.3790.2962425,98427-Jun-200712:39x86SP1
Nlctrs.hNot applicable61524-May-200711:08Not applicableSP1
Nlperf.dll5.2.3790.296224,57627-Jun-200712:39x86SP1
Nlperf.iniNot applicable1,44629-May-200708:52Not applicableSP1
Windows Server 2003, x64-based versions
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Netapi32.dll5.2.3790.2962603,64826-Jun-200722:53x64SP1Not applicable
Netlogon.dll5.2.3790.2962689,15226-Jun-200722:53x64SP1Not applicable
Nlctrs.hNot applicable61526-Jun-200722:53Not applicableSP1Not applicable
Nlperf.dll5.2.3790.296223,55226-Jun-200722:53x64SP1Not applicable
Nlperf.iniNot applicable1,44626-Jun-200722:53Not applicableSP1Not applicable
Nlctrs.hNot applicable61526-Jun-200722:53Not applicableSP1Not applicable
Nlperf.dll5.2.3790.296223,55226-Jun-200722:53x64SP1Not applicable
Nlperf.iniNot applicable1,44626-Jun-200722:53Not applicableSP1Not applicable
Nlctrs.hNot applicable61526-Jun-200722:53Not applicableSP1Not applicable
Nlperf.dll5.2.3790.296223,55226-Jun-200722:53x64SP1Not applicable
Nlperf.iniNot applicable1,44626-Jun-200722:53Not applicableSP1Not applicable
Wnetapi32.dll5.2.3790.2962350,20826-Jun-200722:53x86SP1WOW
Wnetlogon.dll5.2.3790.2962425,98426-Jun-200722:53x86SP1WOW
Wnlperf.dll5.2.3790.296224,57626-Jun-200722:53x86SP1WOW
Windows Server 2003 with Service Pack 1, Itanium-based versions
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Netapi32.dll5.2.3790.2962905,72826-Jun-200722:53IA-64SP1Not applicable
Netlogon.dll5.2.3790.2962988,67226-Jun-200722:53IA-64SP1Not applicable
Nlctrs.hNot applicable61526-Jun-200722:53Not applicableSP1Not applicable
Nlperf.dll5.2.3790.296237,88826-Jun-200722:53IA-64SP1Not applicable
Nlperf.iniNot applicable1,44626-Jun-200722:53Not applicableSP1Not applicable
Wnetapi32.dll5.2.3790.2962350,20826-Jun-200722:53x86SP1WOW
Wnetlogon.dll5.2.3790.2962425,98426-Jun-200722:53x86SP1WOW
Wnlperf.dll5.2.3790.296224,57626-Jun-200722:53x86SP1WOW
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684Description of the standard terminology that is used to describe Microsoft software updates

Properties

Article ID: 928576 - Last Review: May 28, 2012 - Revision: 6.0
APPLIES TO
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
  • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
Keywords: 
kbautohotfix kbexpertiseinter kbwinserv2003postsp2fix kbqfe KB928576

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com