10

Why, when I copy a file (windows explorer copy, paste), am I getting ~100KB/s transfer rate from a drive mapped using the "net use" command in the command prompt and between 25-50MB/s transfer rate when I map the drive using Windows explorer? What is different about these two methods that would affect transfer speed?

Givens/Environment:

  • Server of the share: Windows 2012R2, locked down with the CIS benchmark at http://benchmarks.cisecurity.org/downloads/show-single/?file=windows2012R2.110

    • Settings were locked down by group policy on the domain controller that the server is a member of.
  • Server of the share is attached to a domain controller on the same network, let's call it "mydomain.local"

  • Server connecting to the share: Windows 2008R2, remote location, different domain, let's call it "mydomain.remote"

  • Removing all of the CIS recommended settings makes the speed fast for both types of network drive mapping.

  • The connecting and the sharing servers are in two different data centers, connected via the internet

  • Regardless of which connection (net use / windows explorer) is used, the same credentials are supplied. Let's call this account: mydomain.local\myuser

  • I believe the speed is slow because of this (http://jrs-s.net/2013/04/15/windows-server-2012-slow-networksmbcifs-problem/ ), but I don't know why it would be different depending on if "net use" was used rather than windows explorer.

1

I have seen situations multiple times regarding domain controllers hosting shares. They require a security signature on SMB that can dramatically slow file transfer rates to and from domain controllers especially on legacy hardware as the encryption process taxes the processor pretty hard.

Here is the registry key

HKLM\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature

Here is an article related to these statements.

https://technet.microsoft.com/en-us/library/c9dfa127-8e28-46de-81d0-6d0742c28420

  • In this situation, the domain controller is not the server hosting the share. I may not have been clear in my word choice when I said that the server of the share was "attached" to the domain, but neither the sharing server nor the connecting (client) server is a domain controller, and they are connected to two different domains. I did think that that registry key (or in my case, the group policy) had an effect, but I can't understand why net use would be different than mapping it in windows explorer. – JNadal Jan 22 '15 at 0:25
  • It may be worth checking for the registry entry in the server to validate if the signature is turned on or not. You could compare transfer times between the two states and rule out some possibilities or solve the problem. – Citizen Jan 22 '15 at 1:19
  • Well, yes, I will say that the signature is turned on -- the CIS benchmark linked in the original question requires it. My question wasn't about why net use was slowing down with that the requirement of security signature -- that much was clear in the documentation of the benchmark. I don't understand why net use and the GUI have different performance when that requirement is turned on. – JNadal Feb 5 '15 at 14:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.