Re: Hang @ Applying Computer Settings/Applying Your Personal Setti

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

No Problem. I would say nine out of ten times the problem is related to dns
misconfiguration [most common issue by far], network connectivity, sysvol
problems, access denied to needed ports, etc. but yours is a difficult nut
to crack. Darren makes a good point about registry problems but it seems
weird that all 20 machines would be affected but there has to be a common
element among them. If you want to give it a try you can use the free tools
filemon and regmon to see what is going on when you do a GP refresh with
Gpupdate and Gpupdate /force. However they log a lot of activity but usually
you can scan the logs pretty quickly and the left hand column has a
timestamp counter for each file/registry access. --- Steve


"Woolpert" <alert.manager@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:EB266AFB-78D7-422E-8260-326F88A31F3F@xxxxxxxxxxxxxxxx
>I do appreciate the direction you gave, and if nothing else, I got a
> confirmation that we seem to be doing things right. Thanks again :)
>
> If I do get a resolution to this, short of reconfig'ing the PCs, I'll post
> back.
>
> Have a great weekend!
>
> "Steven L Umbach" wrote:
>
>> Hmm. It would appear the you have ruled out network connectivity problems
>> due to issues with SMB signing. It is not unusual for a computer to hang
>> a
>> while after it reboots the first time and applies settings from a Group
>> Policy that has had changes but that should not happen every time unless
>> registry/security policy processing is configured "process even if Group
>> Policy objects have not changed" and since that only affects certain
>> computers that would most likely have to be configured in local Group
>> Policy
>> [gpedit.msc] under computer configuration/administrative
>> templates/system/group policy.
>>
>> I am not an expert at reading userenv.logs but as far as I can tell
>> everything looks good with the exception of the time it is taking to
>> parse
>> the reg.pol files which is taking over a second for each registry [way
>> too
>> long] entry which I am at a loss to explain unless you have an issue with
>> network speed as I noticed going back to your previous reply that the
>> good
>> and problem computers had different network adapters with the problem
>> computers having a gigabit network adapter. There should be a line in the
>> userenv.log file that looks like "PingComputer: Adapter speed 100000000
>> bps"
>> which is what shows on my computer for example. You may want to look and
>> that entry and consider trying a different network adapter in a problem
>> computer even if the Adapter speed looks correct as that value may simply
>> be
>> taken from the registry but not reflect actual performance. You could try
>> swapping an adapter from a "good" computer for a while to see what
>> happens.
>> That may be a long shot but other than that I am out of ideas :( ---
>> Steve
>>
>>
>> "Woolpert" <alert.manager@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:A50B7467-1CEC-42C7-AD2D-7E154946F64E@xxxxxxxxxxxxxxxx
>> > Steve and Darren :)
>> >
>> > I wanna say 'woohoo' and 'damn' all at the same time :)
>> >
>> > I have tried unjoining, rebooting, deleting comp acct in AD, rejoining,
>> > rebooting a few of the problem PCs but same problem.
>> >
>> > Our environment is Windows 2000 Pro SP4 on the desktops and the two DCs
>> > are
>> > W2K3 Server. Policies are being created and maintained only on
>> > ad40dc2.
>> >
>> > The Default Domain Controller Policy has the following settings:
>> > * Microsoft network server: Digitally sign communications (always) =
>> > Disabled
>> > * Microsoft network server: Digitally sign communications (if client
>> > agrees)
>> > = Enabled
>> >
>> > We did this because the local policies we were pushing out when we were
>> > running NT4 had signing disabled on the client. I've confirmed the
>> > following
>> > settings are in affect on both a problem and working PC:
>> >
>> > * Digitally sign client communications (always) = Disabled
>> > * Digitally sign client communications (when possible) = Disabled
>> >
>> > I ran though a test where I started both the user and computer objects
>> > of
>> > a
>> > problem PC in an OU with no policy applied to it and none being
>> > inherited
>> > (we
>> > have unlinked the Default Domain Policy but not deleted it). I then
>> > started
>> > to recreate the policies. All went fine until I started adding
>> > settings
>> > under Administrative Templates. As soon as I added the first one,
>> > there
>> > was
>> > a noticeable delay but it was still seconds. As I added more (about 10
>> > at
>> > a
>> > time) it got longer and longer until I was seeing the same as when the
>> > production policies were in effect.
>> >
>> > USERENV.LOG from problem PC
>> > ___________________________
>> >
>> > USERENV(e8.550) 18:05:53:973 ApplyGroupPolicy: Entering. Flags = 7
>> > USERENV(e8.550) 18:05:54:694 ProcessGPOs:
>> > USERENV(e8.550) 18:05:54:694 ProcessGPOs:
>> > USERENV(e8.550) 18:05:54:694 ProcessGPOs: Starting computer Group
>> > Policy
>> > processing...
>> > USERENV(e8.550) 18:05:54:694 ProcessGPOs:
>> > USERENV(e8.550) 18:05:54:694 ProcessGPOs:
>> > USERENV(e8.550) 18:05:54:714 EnterCriticalPolicySection: Machine
>> > critical
>> > section has been claimed. Handle = 0x488
>> > USERENV(e8.550) 18:05:54:714 ProcessGPOs: Machine role is 2.
>> > USERENV(e8.550) 18:05:54:714 IsSlowLink: Slow link transfer rate is 0.
>> > Always download policy.
>> > USERENV(e8.550) 18:05:55:115 ProcessGPOs: User name is:
>> > CN=EVANSM,OU=Computers,OU=Migrated Objects,DC=Woolpertinc,DC=local,
>> > Domain
>> > name is: WOOLPERTINC
>> > USERENV(e8.550) 18:05:55:115 ProcessGPOs: Domain controller is:
>> > \\ad40dc2.Woolpertinc.local Domain DN is Woolpertinc.local
>> > USERENV(e8.550) 18:05:55:135 ProcessGPOs: Calling GetGPOInfo for normal
>> > policy mode
>> > USERENV(e8.550) 18:05:55:135 GetGPOInfo:
>> > ********************************
>> > USERENV(e8.550) 18:05:55:135 GetGPOInfo: Entering...
>> > USERENV(e8.550) 18:05:55:305 GetGPOInfo: Server connection
>> > established.
>> > USERENV(e8.550) 18:05:55:485 GetGPOInfo: Bound successfully.
>> > ...
>> > USERENV(e8.550) 18:05:58:149 ParseRegistryFile: Leaving.
>> > USERENV(e8.550) 18:05:58:149 ResetPolicies: Leaving.
>> > USERENV(e8.550) 18:05:58:149 ParseRegistryFile: Entering with
>> > <\\Woolpertinc.local\sysvol\Woolpertinc.local\Policies\{07BDF0EA-F7C6-43AE-873A-4F5F20576FB1}\Machine\registry.pol>.
>> > USERENV(504.100) 18:05:59:631 LibMain: Process Name:
>> > C:\WINNT\System32\WBEM\WinMgmt.exe
>> > USERENV(e8.550) 18:05:59:762 SetRegistryValue:
>> > NoMSAppLogo5ChannelNotify
>> > =>
>> > 1 [OK]
>> > USERENV(e8.550) 18:06:01:374 SetRegistryValue: Deleted value
>> > <DisableLocalMachineRun>.
>> > USERENV(e8.550) 18:06:03:046 SetRegistryValue: Deleted value
>> > <DisableLocalMachineRunOnce>.
>> > USERENV(e8.550) 18:06:04:448 SetRegistryValue: NoWelcomeScreen => 1
>> > [OK]
>> > USERENV(e8.550) 18:06:05:920 SetRegistryValue: NoOnlinePrintsWizard =>
>> > 1
>> > [OK]
>> > USERENV(e8.550) 18:06:07:333 SetRegistryValue: RunLogonScriptSync => 1
>> > [OK]
>> > USERENV(e8.550) 18:06:08:765 SetRegistryValue: HideShutdownScripts => 0
>> > [OK]
>> > USERENV(208.618) 18:06:09:215 LibMain: Process Name:
>> > C:\WINNT\system32\spoolsv.exe
>> > USERENV(e8.550) 18:06:10:177 SetRegistryValue: HideStartupScripts => 0
>> > [OK]
>> > USERENV(e8.550) 18:06:11:619 SetRegistryValue: RunStartupScriptSync =>
>> > 0
>> > [OK]
>> > USERENV(e8.550) 18:06:13:211 SetRegistryValue: Deleted value
>> > <DisableBkGndGroupPolicy>.
>> > USERENV(e8.550) 18:06:14:232 SetRegistryValue: Deleted value <NoRDS>.
>> > USERENV(e8.550) 18:06:16:816 SetRegistryValue: NoJITSetup => 1 [OK]
>> > USERENV(e8.550) 18:06:18:378 SetRegistryValue: NoUpdateCheck => 1 [OK]
>> > USERENV(e8.550) 18:06:19:851 SetRegistryValue: NoSplash => 1 [OK]
>> > USERENV(e8.550) 18:06:20:992 SetRegistryValue: PreventAutoRun => 1
>> > [OK]
>> > USERENV(e8.550) 18:06:22:054 SetRegistryValue: PreventRun => 1 [OK]
>> > USERENV(e8.550) 18:06:23:025 SetRegistryValue: CEIP => 2 [OK]
>> > USERENV(e8.550) 18:06:24:147 SetRegistryValue: ShowUI => 1 [OK]
>> > USERENV(e8.550) 18:06:25:288 SetRegistryValue: DoReport => 0 [OK]
>> > USERENV(e8.550) 18:06:26:540 SetRegistryValue: ForceQueueMode => 0
>> > [OK]
>> > USERENV(e8.550) 18:06:27:712 SetRegistryValue: AllOrNone => 1 [OK]
>> > USERENV(e8.550) 18:06:29:054 SetRegistryValue: IncludeMicrosoftApps =>
>> > 1
>> > [OK]
>> > USERENV(e8.550) 18:06:30:366 SetRegistryValue: IncludeWindowsApps => 1
>> > [OK]
>> > USERENV(e8.550) 18:06:31:698 SetRegistryValue: IncludeKernelFaults => 1
>> > [OK]
>> > USERENV(e8.550) 18:06:33:009 SetRegistryValue: DWAllowHeadless => 0
>> > [OK]
>> > USERENV(e8.550) 18:06:34:321 SetRegistryValue: DWNoExternalURL => 0
>> > [OK]
>> > USERENV(e8.550) 18:06:35:683 SetRegistryValue: DWNoFileCollection => 0
>> > [OK]
>> > USERENV(e8.550) 18:06:37:165 SetRegistryValue:
>> > DWNoSecondLevelCollection
>> > =>
>> > 0 [OK]
>> > USERENV(e8.550) 18:06:38:557 SetRegistryValue: Deleted value
>> > <DWFileTreeRoot>.
>> > USERENV(e8.550) 18:06:39:959 SetRegistryValue: Deleted value
>> > <DWReporteeName>.
>> > USERENV(e8.550) 18:06:40:841 SetRegistryValue: Disabled => 1 [OK]
>> > USERENV(e8.550) 18:06:42:062 SetRegistryValue: NV PrimaryDnsSuffix =>
>> > woolpertinc.local [OK]
>> > USERENV(e8.550) 18:06:53:339 SetRegistryValue: NtpServer =>
>> > ad40dc1.woolpertinc.local [OK]
>> > USERENV(e8.550) 18:06:54:350 SetRegistryValue: Type => NT5DS [OK]
>> > USERENV(e8.550) 18:06:55:612 SetRegistryValue: Enabled => 1 [OK]
>> > USERENV(e8.550) 18:06:57:054 SetRegistryValue: CrossSiteSyncFlags => 2
>> > [OK]
>> > USERENV(e8.550) 18:06:58:626 SetRegistryValue:
>> > ResolvePeerBackoffMinutes
>> > =>
>> > 15 [OK]
>> > USERENV(e8.550) 18:07:00:199 SetRegistryValue:
>> > ResolvePeerBackoffMaxTimes
>> > =>
>> > 7 [OK]
>> > USERENV(e8.550) 18:07:01:661 SetRegistryValue: SpecialPollInterval =>
>> > 3600
>> > [OK]
>> > USERENV(e8.550) 18:07:03:023 SetRegistryValue: EventLogFlags => 0 [OK]
>> > USERENV(e8.550) 18:07:04:294 SetRegistryValue: Enabled => 0 [OK]
>> > USERENV(e8.550) 18:07:05:887 SetRegistryValue: Security_HKLM_only => 1
>> > [OK]
>> > USERENV(e8.550) 18:07:07:509 SetRegistryValue: ProxySettingsPerUser =>
>> > 0
>> > [OK]
>> > USERENV(e8.550) 18:07:09:151 SetRegistryValue: Security_options_edit =>
>> > 1
>> > [OK]
>> > USERENV(e8.550) 18:07:10:834 SetRegistryValue: Security_zones_map_edit
>> > =>
>> > 1
>> > [OK]
>> > USERENV(e8.550) 18:07:12:606 SetRegistryValue: NoSlowLink => 0 [OK]
>> > USERENV(e8.550) 18:07:14:509 SetRegistryValue: NoBackgroundPolicy => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:16:382 SetRegistryValue: NoGPOListChanges => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:18:285 SetRegistryValue: NoBackgroundPolicy => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:20:157 SetRegistryValue: NoGPOListChanges => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:21:940 SetRegistryValue: NoSlowLink => 0 [OK]
>> > USERENV(e8.550) 18:07:23:843 SetRegistryValue: NoBackgroundPolicy => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:25:715 SetRegistryValue: NoGPOListChanges => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:27:498 SetRegistryValue: NoSlowLink => 0 [OK]
>> > USERENV(e8.550) 18:07:29:401 SetRegistryValue: NoBackgroundPolicy => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:31:273 SetRegistryValue: NoGPOListChanges => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:33:176 SetRegistryValue: NoBackgroundPolicy => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:35:049 SetRegistryValue: NoGPOListChanges => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:36:821 SetRegistryValue: NoSlowLink => 0 [OK]
>> > USERENV(e8.550) 18:07:38:734 SetRegistryValue: NoBackgroundPolicy => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:40:597 SetRegistryValue: NoGPOListChanges => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:42:379 SetRegistryValue: NoSlowLink => 0 [OK]
>> > USERENV(e8.550) 18:07:44:282 SetRegistryValue: NoBackgroundPolicy => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:46:155 SetRegistryValue: NoGPOListChanges => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:47:927 SetRegistryValue: NoSlowLink => 0 [OK]
>> > USERENV(e8.550) 18:07:49:800 SetRegistryValue: NoGPOListChanges => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:51:572 SetRegistryValue: NoSlowLink => 0 [OK]
>> > USERENV(e8.550) 18:07:53:475 SetRegistryValue: NoBackgroundPolicy => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:55:348 SetRegistryValue: NoGPOListChanges => 0
>> > [OK]
>> > USERENV(e8.550) 18:07:56:780 SetRegistryValue: NC_ShowSharedAccessUI =>
>> > 0
>> > [OK]
>> > USERENV(e8.550) 18:07:58:272 SetRegistryValue:
>> > NC_PersonalFirewallConfig
>> > =>
>> > 0 [OK]
>> > USERENV(e8.550) 18:07:59:704 SetRegistryValue: NC_AllowNetBridge_NLA =>
>> > 0
>> > [OK]
>> > USERENV(e8.550) 18:08:01:777 SetRegistryValue: GroupPolicyRefreshTime
>> > =>
>> > 90
>> > [OK]
>> > USERENV(e8.550) 18:08:03:109 SetRegistryValue:
>> > GroupPolicyRefreshTimeOffset
>> > => 30 [OK]
>> > USERENV(e8.550) 18:08:04:401 SetRegistryValue:
>> > GroupPolicyMinTransferRate
>> > =>
>> > 0 [OK]
>> > USERENV(e8.550) 18:08:05:813 SetRegistryValue:
>> > DisableWindowsUpdateAccess
>> > =>
>> > 1 [OK]
>> > USERENV(e8.550) 18:08:07:045 SetRegistryValue: NoAutoUpdate => 1 [OK]
>> > USERENV(e8.550) 18:08:08:327 SetRegistryValue: Deleted value
>> > <AUOptions>.
>> > USERENV(e8.550) 18:08:09:779 SetRegistryValue: Deleted value
>> > <ScheduledInstallDay>.
>> > USERENV(e8.550) 18:08:11:241 SetRegistryValue: Deleted value
>> > <ScheduledInstallTime>.
>> > USERENV(e8.550) 18:08:13:844 SetRegistryValue: SyncForegroundPolicy =>
>> > 1
>> > [OK]
>> > USERENV(e8.550) 18:08:14:916 SetRegistryValue: Enable => 0 [OK]
>> > USERENV(e8.550) 18:08:16:198 SetRegistryValue: RegistrationEnabled => 0
>> > [OK]
>> > USERENV(e8.550) 18:08:17:329 SetRegistryValue: SearchList =>
>> > woolpertinc.local,woolpert.com [OK]
>> > USERENV(e8.550) 18:08:18:531 SetRegistryValue: PublishPrinters => 0
>> > [OK]
>> > USERENV(e8.550) 18:08:19:683 SetRegistryValue: ServerThread => 0 [OK]
>> > USERENV(e8.550) 18:08:21:125 SetRegistryValue: fSingleSessionPerUser =>
>> > 1
>> > [OK]
>> > USERENV(e8.550) 18:08:22:637 SetRegistryValue:
>> > fNoRemoteDesktopWallpaper
>> > =>
>> > 1 [OK]
>> > USERENV(e8.550) 18:08:24:069 SetRegistryValue: fWritableTSCCPermTab =>
>> > 0
>> > [OK]
>> > USERENV(e8.550) 18:08:25:351 SetRegistryValue: fDisableCam => 1 [OK]
>> > USERENV(e8.550) 18:08:26:633 SetRegistryValue: fDisableCcm => 0 [OK]
>> > USERENV(e8.550) 18:08:28:005 SetRegistryValue: PerSessionTempDir => 0
>> > [OK]
>> > USERENV(e8.550) 18:08:29:437 SetRegistryValue: DeleteTempDirsOnExit =>
>> > 1
>> > [OK]
>> > USERENV(e8.550) 18:08:30:869 SetRegistryValue: MaxDisconnectionTime =>
>> > 60000
>> > [OK]
>> > USERENV(e8.550) 18:08:32:151 SetRegistryValue: MaxIdleTime => 1800000
>> > [OK]
>> > USERENV(e8.550) 18:08:33:483 SetRegistryValue: fReconnectSame => 1
>> > [OK]
>> > USERENV(e8.550) 18:08:34:825 SetRegistryValue: EnableFirewall => 0
>> > [OK]
>> > USERENV(e8.550) 18:08:36:207 SetRegistryValue: EnableFirewall => 0
>> > [OK]
>> > USERENV(e8.550) 18:08:37:428 SetRegistryValue: DisableAutoUpdate => 1
>> > [OK]
>> > USERENV(e8.550) 18:08:37:438 ParseRegistryFile: Leaving.
>> > ...
>> > USERENV(e8.d0) 18:09:34:261 LoadUserProfile: hProfile = <0x6e0>
>> > USERENV(e8.d0) 18:09:34:261
>> > =========================================================
>> > USERENV(e8.5cc) 18:09:34:321 ApplyGroupPolicy: Entering. Flags = 6
>> > USERENV(e8.5cc) 18:09:34:321 ProcessGPOs:
>> > USERENV(e8.5cc) 18:09:34:321 ProcessGPOs:
>> > USERENV(e8.5cc) 18:09:34:321 ProcessGPOs: Starting user Group Policy
>> > processing...
>> > USERENV(e8.5cc) 18:09:34:321 ProcessGPOs:
>> > USERENV(e8.5cc) 18:09:34:321 ProcessGPOs:
>> > USERENV(e8.5cc) 18:09:34:321 EnterCriticalPolicySection: User critical
>> > section has been claimed. Handle = 0x7fc
>> > USERENV(e8.5cc) 18:09:34:321 ProcessGPOs: Machine role is 2.
>> > USERENV(e8.5cc) 18:09:34:321 IsSlowLink: Slow link transfer rate is 0.
>> > Always download policy.
>> > USERENV(e8.5cc) 18:09:34:321 ProcessGPOs: User name is:
>> > CN=Kovacs,OU=Users,OU=Migrated Objects,DC=Woolpertinc,DC=local, Domain
>> > name
>> > is: WOOLPERTINC
>> > USERENV(e8.5cc) 18:09:34:321 ProcessGPOs: Domain controller is:
>> > \\ad40dc2.Woolpertinc.local Domain DN is Woolpertinc.local
>> > USERENV(e8.5cc) 18:09:34:321 MyGetDomainDNSName: Successfully
>> > determined
>> > fqdn CN=Kovacs,OU=Users,OU=Migrated Objects,DC=Woolpertinc,DC=local
>> > USERENV(e8.5cc) 18:09:34:321 MyGetDomainDNSName: Successfully obtained
>> > domain dns name Woolpertinc.local
>> > USERENV(e8.5cc) 18:09:34:331 ProcessGPOs: Calling GetGPOInfo for normal
>> > policy mode
>> > ...
>> > USERENV(e8.5cc) 18:09:35:273 ResetPolicies: Leaving.


.

Relevant Pages

  • RE: Mass Distribution of Security Policies
    ... It could start with a Network usage agreement, (Advisory Policy) to all ... Mass Distribution of Security Policies ...
    (Security-Basics)
  • Re: EventID 1054 from Userenv for startup script
    ... startup script policy. ... I see a problem with the order in which the policies are applied. ... Those two contain the requirement to "Wait for network before logging ... Often, the startup script won't run, but if I run it manually, than ...
    (microsoft.public.windows.group_policy)
  • Re: No Shut Down or Restart for Domain Admins
    ... run rsop.msc from your DC and check which policy is responsible to this. ... I have created a group policy in a development network and imported it ... NT AUTHORITY\Authenticated Users Read (from Security Filtering) No ... Enforce user logon restrictions Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Re: Hang @ Applying Computer Settings/Applying Your Personal Setti
    ... It would appear the you have ruled out network connectivity problems ... while after it reboots the first time and applies settings from a Group ... Policy that has had changes but that should not happen every time unless ... that entry and consider trying a different network adapter in a problem ...
    (microsoft.public.windows.group_policy)
  • Re: EventID 1054 from Userenv for startup script
    ... if Default Domain Policy shows as being the higest number on the ... Just above the bottom one would be any Site policies if they existed. ... See here about the order of GPO processing:http://technet.microsoft.com/en-us/library/cc778890.aspx ... Those two contain the requirement to "Wait for network before logging ...
    (microsoft.public.windows.group_policy)