IIS 7 and Above
Slow TTFB for regular domain users, fast for admin accounts
Last post Aug 06, 2019 07:26 PM by Rovastar
Aug 05, 2019 10:13 PM|manwithahammer|LINK
I run an IIS server which started exhibiting slow performance recently. We outsource our infrastructure, and after spending 2 hours ruling out all kinds of issues, this is what we discovered:
To be explicit, TTFB for regular users is 4 seconds slower than for admin users.
We seem to have ruled out security protocol and cypher issues. Could it be related to proxy settings or or Windows Firewall settings? The network admin says that the difference between regular and admin users relate to things like disabling USB drives and
other corporate policies, nothing network related.
Any help would be appreciated.
Aug 06, 2019 05:11 PM|Rovastar|LINK
Are there any caching issues here?
I'm a little confused by your login situation. Is that logging into a website via application code? Or some NTLM login?
Can you just hit a static page like plain html or a jpg, etc and do you see the same TTFB?
Aug 06, 2019 05:18 PM|manwithahammer|LINK
No, nothing to do with caching.
There is no logging in, this is accessing an internal website through a browser, using Windows Authentication. Tested on Chrome and IE, same results.
It doesn't matter what asset you are accessing, it is consistently the same overhead.
Aug 06, 2019 05:43 PM|Rovastar|LINK
Local windows auth or a domain? Maybe it issues contacting the DC in a timely manner.
Aug 06, 2019 05:44 PM|manwithahammer|LINK
We only use domain accounts.
But why would an admin domain account not have that issue?
Aug 06, 2019 07:26 PM|Rovastar|LINK
Difficult to say maybe there is a different login stuff/privileges for those non-admin accounts. I would look into at the DC end and see if it is slow there and look for other things that are slower for non-admin accounts there at login/etc