none
GPP trying to apply on a Microsoft Account causing extremely long login

    Question

  • Environment: Windows 8.1 Enterprise with DirectAccess, AD 2012R2
    Computer used with two accounts, a domain account (for business), and Microsoft account (personal use)

    Occasionally, maybe once out of 10 or 15,when I open my Microsoft account, it tries to apply GPP defined in the domain (group policy shortcuts, group policy environment, drive maps etc), which causes an endless opening session, as if it was waiting for a timeout foreach GPP before move to the next.

    Usually I end up getting tired, I turn off my PC violently, and I restarts by switching off the wifi (and therefore DirectAccess) to be sure it will not retry the same

    I don't understand why a local MS account is trying to apply domain GPP.

     
    Tuesday, June 23, 2015 6:54 PM

Answers

  • Hi Benoit,

    According to your RSOP report here, the system didn't apply domain policy.

    You might post your question on the client forum regarding the log on slowly while use microsoft account.

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, July 08, 2015 6:39 AM
    Moderator

All replies

  • Hello Benoit,

    May I know if you connected the microsoft account with your domain account?

    Do you have any local account (not the microsoft account), if so would you please try with the local account and then have a check?

    Basiclly, with the microsoft account, you can log in to any Windows 8.1 computer or device that's connected to the Internet and your settings will be migrated automatically and synced between them.

    You can check below articles for more reference about the microsoft account and the local account.

    http://www.7tutorials.com/introducing-windows-8-should-you-use-local-account-or-microsoft-account

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, June 25, 2015 5:58 AM
    Moderator
  • No, it's two different account. Just maybe (I'm not sure because I have "recently" reinstalled my Windows) I have use my MS account in the Store app in my domain session. But my domain session is not connected with my Microsoft Account.

    I know what I can do with a Microsoft Account :D

    But I don't understand why my MS account sometimes try to apply domain GPO when I login.

    Thursday, June 25, 2015 7:09 AM
  • Hi Benoit,

    Thanks for your update.

    I had a test on my win8.1 environment and log in with microsoft account and checked the RSOP, no domian policy was applied. And I can see the microsoft account was under the local machine not the domain.

    Would you please run a RSOP report with "gpresult/r" in the command prompt. The command would return a RSOP report and for XX\XX(user account) on XXXX(computer account).

    Would you please help to check the user account listed and let me know the result?

     

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Tuesday, June 30, 2015 2:30 AM
    Moderator
  • sorry for the response time.

    The problem just reproduce by logging me tonight.

    Unfortunately I'm on Windows in french so the back of the command is in French.

    He tries well to apply it on my Microsoft account:

    Outil de résultat du système d'exploitation Microsoft (R) Windows (R) v2.0
    c 2013 Microsoft Corporation. Tous droits réservés.

    Créé le 02/07/2015 à 20:05:50


    Données RSOP pour UC023631\bxxxx_000 sur UC023631 : mode journalisation
    ------------------------------------------------------------------------

    Configuration du système d'exploitation : Station de travail membre
    Version du système d'exploitation...... : 6.3.9600
    Nom du site............................ : N/A
    Profil itinérant :             N/A
    Profil local........................... : C:\Users\bxxxx_000
    Connexion via une liaison lente ? : Non


    PARAMETRES UTILISATEURS
    ------------------------

        Heure de la dernière application de la stratégie de groupe : 02/07/2015 à 19
    :37:46
        Stratégie de groupe appliquée depuis :      MSAD2.domain.local
        Seuil de liaison lente dans la stratégie de groupe :   500 kbps
        Nom du domaine :                        UC023631
        Type de domaine :                        <Ordinateur local>

        Objets Stratégie de groupe appliqués
        -------------------------------------
            N/A

        Les objets stratégie de groupe n'ont pas été appliqués
        car ils ont été refusés
        ----------------------------------------------------------------------------
    -------
            Stratégie de groupe locale
              Filtrage :  Non appliqué (vide)

        L'utilisateur fait partie des groupes de sécurité suivants
        ----------------------------------------------------------
            Niveau obligatoire élevé
            Tout le monde
            Compte local et membre du groupe Administrateurs
            Administrateurs
            Utilisateurs
            INTERACTIF
            OUVERTURE DE SESSION DE CONSOLE
            Utilisateurs authentifiés
            Cette organisation
            b.xxxxxxx@live.fr
            Compte local
            LOCAL
            Authentification de compte Microsoft

    Thursday, July 02, 2015 6:14 PM
  • Hi Benoit,

    According to your RSOP report here, the system didn't apply domain policy.

    You might post your question on the client forum regarding the log on slowly while use microsoft account.

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, July 08, 2015 6:39 AM
    Moderator