none
GPO Processing Hangs 10 minutes off domain

    Question

  • I have startup scripts in the GPO (domain level 2008).  Our domain network onsite is wired and wireless available.  When a Windows 7 machine goes home with a user, it hangs for 10 minutes after being turned on the before the login screen is presented.  I assume that's because the GPO is attempting to wait for the domain controller (where the script resides) to be found -ultimately timing out after 600 seconds I believe.  

    I've tried disabling processing on slow networks but- the network is fast enough (Just no domain at home).  Flip off the wireless during startup and the machine springs to life.

    Ideas?

    *If there is a GPO forum I didn't find it -happy to go there if you guys have a pointer


    • Edited by Fred B Tuesday, March 17, 2015 4:09 PM
    • Moved by Yolanda Zhu Wednesday, March 18, 2015 5:28 AM
    Tuesday, March 17, 2015 3:21 PM

Answers

All replies

  • > machine goes home with a user, it hangs for 10 minutes after being
    > turned on the before the login screen is presented. I assume that's
    > because the GPO is attempting to wait for the domain controller (where
    > the script resides) to be found -ultimately timing out after 600 seconds
    > I believe.
     
    No, it is because of a startup script that hangs - 10 minutes is the
    default timeout for startup scripts. Check "gpresult /h report.html" for
    startup scripts, then verify each script and its behavior if no domain
    is reachable.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Wednesday, March 18, 2015 8:46 AM
  • "verify each script and its behavior if no domain is reachable."

    Thanks for the reply Martin.  Could you explain what you mean by this? I wouldn't think the scripts couldn't be ran at all if the domain is unreachable since the scripts reside there.  Are you referring to the actual cmd that invokes the scripts in GPO?  Is there something I can do to that cmd to avoid this?

    The actual script is invoked from GPO like:

    \\'domain'.com\NETLOGON\SSI\Prod\Launcher-startup.bat

    That batch in turn runs:

    cscript.exe \\'domain'.com\NETLOGON\SSI\Prod\launcher.vbs startup

    However I don't think the batch ever actually runs offline since it resides on the DC which is unreachable.

    Perhaps I need to address the script in some other way than \\'domain'.com\....

    ?





    • Edited by Fred B Wednesday, March 18, 2015 1:52 PM
    Wednesday, March 18, 2015 1:31 PM
  • > Thanks for the reply Martin.  Could you explain what you mean by this? I
    > wouldn't think the scripts could be ran at all if the domain is
    > unreachable since the scripts reside there.
     
    Scripts are "tried to run" even if no domain is available. So it
    strongly depends on your current scripts. You can easily check script
    execution time in the Group Policy Eventlog.
     
    > \\'domain'.com\NETLOGON\SSI\Prod\Launcher-startup.bat
     
    So this is the command line in the script setting? What happens if you
    run exactly this command line in your error situation?
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Wednesday, March 18, 2015 4:29 PM
  • I'll try tonight and let you know.  Thanks again for lending a path
    Wednesday, March 18, 2015 8:30 PM
  • Gives me about a 20, 30 second delay and comes back with network path not found. 
    Thursday, March 19, 2015 2:08 AM
  • > Gives me about a 20, 30 second delay and comes back with network path
    > not found.
     
    Ok, thanks for testing. AFAIK it is a 29 second delay :) BTT: I'd
    suggest enabling gpsvc debug logging and then analyze timing for all GPO
    will help enabling the debug logging, too).
     
    If you cannot use third party software, you might analyze the Group
    Policy Eventlog.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Thursday, March 19, 2015 9:18 AM
  • We have a similar situation when we use mapped drives in user preferences and the computer can't get to the server hosting the shared folder. The time out is about 5-7 minutes so I am not sure it is the same issue, but might be worth looking at.
    Tuesday, March 24, 2015 2:23 PM