A few things...

First, make sure you are using the OLE-DB Provider for SQL Server. It is much faster than the OLE-DB Provider for ODBC Drivers that in turn, will invoke the services of the SQL Server ODBC Driver.

Second, if you use the SQL Server OLE-DB Provider, there is no reason to manually specify the parameters of the command object. Once you specify the connection, the command type and the commandtext, the parameters should automatically be refreshed.

This should greatly improve performance...

PS: Some will say this is not a reccomended practice because it requires an extra trip to the server. IMO, the extra work saved in not having to maintain extra code on the client outweighs the potential cost of an extra round trip. This also has nice implications for more loosely coupled code..

And, the OLE-DB Provider for SQL Server has exceptional performance.