Re: Erratic slow login Win2k3 from XP SP2 - Profile GPO issue log usel



I started to scan your post for DNS mention but was slowed down
to reading due to your informed efforts at examination.
Delay with irratic presence and DNS sort of come in same breath.
Policy engine could be doing all right and at max efficiency given
performance of its dependancies.

"Conor" <Conor@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:61E6C89D-2311-4756-BB63-60FDBC1C9A46@xxxxxxxxxxxxxxxx
On our network login times can vary for no obvious reason, from 2 to 10
minutes. This appears to be an issue with either Group Policy processing
or
user profile. This appears to be slowest for the first login during the
day,
if the box is rebooted during the day the login time is fine, 30 sec to
under
2 minutes.

I have logged data in UserEnv.log and it shows that GPO processing seems
to
occur quickly, without error. There are long delays in processing the
profile
and a mystery unaccounted for section in the log.

This problem is driving me crazy. How the hell can I identify profile
corruption/timeout or GPO timeout issues easily during login?

I have logged log in event using Group Policy core (UserEnv) and registry
CSE logging in %windir%\debug\usermode\UserEnv.log. Set registry key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
and
add value UserEnvDebugLevel = REG_DWORD, value 30002.

I logged a client with a login delay, from entry of user name and password
to executing Outlook as Startup program in the profile which covered 8
minutes 2 seconds. a long time to get a usable desktop.

I have used SysInternals Process Monitor (ProcMon.exe) to log during boot
up, but the log is vast and I have not found any useful data in it.

I have simplified the UserEnv.log output below.

Start login
USERENV(494.498) 09:17:41:343 LibMain: Process Name:
\??\C:\WINDOWS\system32\winlogon.exe
34 sec start ProcessGPO and SearchDSObject
09:17:51:093 ApplyGroupPolicy
09:17:51:109 ProcessGPOs: Starting computer Group Policy
09:18:25:437 ProcessGPOs: User name is:
CN=TESTPC,OU=IT_GROUP,OU=DESKTOPS,OU=RESOURCES

49 sec delay MachinePolicyCallback to LoadUserProfile
09:18:28:491 MachinePolicyCallback: Setting status UI to Applying Security
policy
09:18:34:323 MachinePolicyCallback
09:19:17:610 LoadUserProfile

58 sec Delay RecurseDirectory
09:19:19:506 GetExistingLocalProfileImage
09:19:20:462 RecurseDirectory
09:20:18:229 RecurseDirectory

16 Secs Load Profile
09:20:20:016 CopyProfileDirectoryEx : Found hive file NTUSER.DAT
09:20:36:481 LoadUserProfile

251 Sec delay for??
USERENV(494.fc4) 09:20:36:654 IsSyncForegroundPolicyRefresh: Synchronous,
Reason: NonCachedCredentials
USERENV(494.65c) 09:24:47:124 MachinePolicyCallback: Setting status UI to
Applying computer settings...

3 second to apply User Policy
09:24:48:877 ProcessGPOs: Leaving with 1
09:24:53:226 ApplyGroupPolicy
09:24:53:336 ProcessGPOs: User name is: CN=TESTUSER,OU= IT_GROUP
09:24:53:711 SearchDSObject: Searching OU= IT_GROUP
09:24:56:606 ProcessGPOs: Leaving with 1

44 Seconds Profile script to Outlook execution
09:24:59:360 GetProfileType
09:25:00:111 GetUserDNSDomainName: Failed to impersonate user
09:25:03:206 LibMain: Process Name: C:\WINDOWS\system32\wscript.exe
09:25:43:228 LibMain: Process Name: C:\Program Files\Microsoft
Office\Office\OSA9.EXE



.



Relevant Pages

  • Re: Administrator Profile corruption
    ... in a new profile being created at each logon. ... policy hasn't been incorrectly adjusted then fault is the ... This would distinguish 'is it the admin profile?' ... However maybe this is a clue: When I RDP into server login, ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator Profile corruption
    ... I'm on administrator.clc.006 it just creates a new profile everytime login. ... maybe some script or policy. ... as well as EVENTID 1030 'Windows cannot query for the list of Group Policy ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator Profile corruption
    ... It's an interesting thought, although I presume that any user account, ... the Default Domain Policy and Default DC Policy assuming the User ... However maybe this is a clue: When I RDP into server login, ... I'm on administrator.clc.006 it just creates a new profile everytime ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator Profile corruption
    ... Make sure that network cable and devices are plugged in and functioning ... I'm on administrator.clc.006 it just creates a new profile everytime login. ... Also under GPO Policy Events I'm getting EVENTID 1097 ' Windows cannot find ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator Profile corruption
    ... The policy errors below indicate the SBS is having a hard time talking to ... However maybe this is a clue: When I RDP into server login, ... I'm on administrator.clc.006 it just creates a new profile everytime ...
    (microsoft.public.windows.server.sbs)