Fixing Event ID 6005 and 6006

Situation: The client is running Windows 2012 R2 server. The Event logs show these ID 6005 Description: The winlogon notification subscriber <subscriber> is taking long time to handle the notification event.

Event ID 6006, Description: The winlogon notification subscriber <Profiles> took 606 second(s) to handle the notification event (Logon).

Troubleshooting: In most cases, this is the DNS issue. In our case, Reverse Lookup Zones has a double DNS record. for example server1 and server2 have the same IP address. That cause login slow.

That also could be GP Folder Redirection and Drive Mapping drive issue.

Published by

Bob Lin

Bob Lin, Chicagotech-MVP, MCSE & CNE Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on http://www.ChicagoTech.net How to Install and Configure Windows, VMware, Virtualization and Cisco on http://www.HowToNetworking.com

Leave a Reply