none
Slow domain login only on 8/8.1

    Question

  • We have a situation where any domain joined computers on network experience a delay from inputting the password to getting into the desktop. 

    Here is the data we have thus far. 

    • Non domain joined computers do not have this symptom
    • Domain joined computers that are off network log in instantly, so it is definitely GPO processing. 
    • Slow link is NOT detected, event logs specifically state that it sees the link as a non slow link, and thus will not throttle the connection. 
    • DNS servers are pointing at the correct addresses. 
    • All computers are kept up to date
    • AV: Vipre business
    • We have minimal item targeting, only used for printers and mapping a DFS namespace
    • One server in the domain is running 2003, soon to be retired, other than that, all are 2008R2 and 2012
    • All DC's were online at the time of the tests, and responded to pings. 

    At this point, here is how I am attempting to find the problem:

    I am building a test group to duplicate the issue, and am adding GPO's one at a time, timing the login after adding it. My hope is that this will point out the culprit. 

    I can provide any logs or information that you need. Any help / pointers would be greatly appreciated. Thank you. 

    Tuesday, June 23, 2015 11:47 PM

Answers

  • Root cause found:

    The Vipre AV client has a feature that watches for changed files and inspects them at every bootup. Disabling this fixed the issue. 

    To disable it w/ a GPO, tell it to set the GFI LanGuard 11 Attendant to "Stop"

    Thursday, July 16, 2015 10:19 PM

All replies

  • Any scripts running for the windows 8 machines, or any WMi filters?
    Wednesday, June 24, 2015 7:28 AM
  • Hi,

    There are a few aspects could impact the log in time. Such as gpo with scripts, gpo with WMI filters and you can check if you configured the startup policy processing wait time.

    You can check the below link for some more reference:

    http://blogs.technet.com/b/grouppolicy/archive/2013/05/23/group-policy-and-logon-impact.aspx

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, June 24, 2015 9:56 AM
    Moderator
  • We have found several GPO's to be the culprit and are now attempting to find why they are causing issues. 

    Two that are taking 10 seconds a piece is the creation of 2 shortcut files. This is particularly odd, as we have several more of these that present no issues. 

    From there we have an item level targeted drive mapping that takes 7 seconds, 

    We have an item level target printer GPO that takes 15 seconds

    Finally we have 2 registry settings that are applied at 5-7 seconds a piece.

    The interesting part through all of this is that we are using the same policies on both 7 and 8, and while we are experiencing a large delay in windows 8, we are seeing 8 second logins, versus the 40+ seconds for 8.

    I am currently gathering more data and will report here with it. 

    EDIT: The root cause of the printer slowness was using preferences instead of deploying via printer management which uses policies

    Friday, July 10, 2015 8:39 PM
  • As we suspected then . Slow processing the question is answered right?
    Friday, July 10, 2015 10:28 PM
  • Root cause found:

    The Vipre AV client has a feature that watches for changed files and inspects them at every bootup. Disabling this fixed the issue. 

    To disable it w/ a GPO, tell it to set the GFI LanGuard 11 Attendant to "Stop"

    Thursday, July 16, 2015 10:19 PM