Check the event logs on the ones which are *not* having a problem. It may be that for some reason they are not applying group policies - this will then make them start up quickly (ie "normal" behaviour is slow because of the security profile settings but some machines are skipping them).
Steve > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Gary Clark > Sent: 03 August 2005 11:12 > To: [email protected] > Subject: RE: [ActiveDir] Group Policy delays > > Hi Neil, > > Thanks some long forgotten security profile settings seem to > have woken up. Computer policy refresh on each start up so > why only a subset of users are suffering is still a bit of a > mystery. Some rethinking of our policies is in order methinks. > > Thank you for your help. > > Gary > > > --- > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Ruston, Neil > Sent: 03 August 2005 09:43 > To: '[email protected]' > Subject: RE: [ActiveDir] Group Policy delays > > - Are your subnets and sites defined correctly? If not, > clients may authenticate and process GPOs from DCs across > slow WAN links. > - Does your GPO contain lots of registry and/or file > DACL/SACL settings? This could account for the slow processing. > > neil > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Gary Clark > Sent: 03 August 2005 09:32 > To: [email protected] > Subject: [ActiveDir] Group Policy delays > > > > Hello, > > We have 300 identical Dell GX270's running XP in a 2003 > Active Directory and we are seeing a few (<1%) suffering from > extremely long logons. The applying computer settings is > displayed after the users signs in and stays there for some > 20-30 Mins, during which time the HDD activity light is near > constantly on. Given a long enough wait the PC then opens > the desktop and behaves itself. > > Having started, the computer can then be re-started and the > PC starts in a timely fashion with no delay. > > The logs show clean, and the long delays can be experienced > whether or not a change to the Group policy has been > published. We suspected that it follows a user not shutting > down cleanly and that some sort of chkdsk may be running > (scanning a 120GB drive could be expected to take half an > hour), however we have users who swear blind that they are > shutting their computers down nicely and still having the > slow starts. > > The Policies that we run are minimal and if it were a screwed > up policy it would effect all computers as the OU structure > does not separate the computers. > > If anyone has some thoughts for seeking out the root cause I > would be very grateful. > > Cheers > Gary > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > ============================================================== > ========== > ====== > Please access the attached hyperlink for an important > electronic communications disclaimer: > > http://www.csfb.com/legal_terms/disclaimer_external_email.shtml > > ============================================================== > ========== > ====== > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
