43 seconds just for the gpo time. YIKES! What amazed me (well, not really) when I started the current project was that no one, ever, checked the event logs on any of the XA servers. I found almost 700 users that had wrong permissions on the folder redirection share and had their home folder setup incorrectly in ADUC. That means for the 10 redirected folders, every folder received an accessed denied error, which slows down the logon (and gpo processing). That also means that content they thought was being redirected was in fact, in the roaming profile which is copied down to each XA server and then deleted (by their policy).
Finding Microsoft Folder Redirection Errors for Citrix XenApp 6.5 Using Microsoft PowerShell http://carlwebster.com/finding-microsoft-folder-redirection-errors-for-citrix-xenapp-6-5/ They also had numerous invalid Site to Zone Mappings which was slowing down gpo processing and logons. Troubleshooting Microsoft Group Policy Site to Zone Mapping Using Microsoft PowerShell http://carlwebster.com/troubleshooting-microsoft-group-policy-site-to-zone-mapping/ I wish I had written this gpo processing time script before we started making all the gpo and citrix policy changes but we estimate we got gpo processing down from 35 to 45 seconds to 8.09 seconds. It would have been nice to know the original number exactly but, oh well. For the Site to Zone Mapping issue, I relied upon another script to get their multiple 100+ mappings into my laptop lab's domain for testing to see what wasn't valid and what I could optimize. Create or Update a Group Policy Using Settings From Another Group Policy Using Microsoft PowerShell http://carlwebster.com/create-update-group-policy-using-settings-another-group-policy/ Thanks Webster From: listsadmin@lists.myITforum.com [mailto:listsadmin@lists.myITforum.com] On Behalf Of christopher.catl...@us.sogeti.com Sent: Friday, March 18, 2016 1:19 PM To: kurt.b...@gmail.com; powersh...@lists.myitforum.com Subject: RE: [powershell] RE: What event logs are on a system Very nice. Average: 43.4498620055198 Minimum: 1 Maximum: 118 For our xa6.5 farm We have a gpo that uses item-level targeting on ~150 shorcuts....... (I wish I could kill it.) From: Kurt Buff<mailto:kurt.b...@gmail.com> Sent: Friday, March 18, 2016 11:45 AM To: powersh...@lists.myitforum.com<mailto:powersh...@lists.myitforum.com> Subject: Re: [powershell] RE: What event logs are on a system Thou art indeed a busy man. Kudos. Kurt On Fri, Mar 18, 2016 at 8:35 AM, Webster <webs...@carlwebster.com<mailto:webs...@carlwebster.com>> wrote: > Yep, just provide a list of computer names somehow. I just don't have time to > make the script work with multiple ways of getting computer names. Heck, I > need to finish up the DNS script and the update to the Config Manager script > and the XenServer documentation script and the 10 or so misc AD scripts > and..... > > -----Original Message----- > From: listsadmin@lists.myITforum.com<mailto:listsadmin@lists.myITforum.com> > [mailto:listsadmin@lists.myITforum.com] On Behalf Of Kurt Buff > Sent: Friday, March 18, 2016 10:25 AM > To: powersh...@lists.myitforum.com<mailto:powersh...@lists.myitforum.com> > Subject: Re: [powershell] RE: What event logs are on a system > > Hmmm..... > > We don't have XenApp, but I suppose this could be run against workstations as > well. > > Should prove quite useful. > > Kurt > > On Fri, Mar 18, 2016 at 6:18 AM, Webster > <webs...@carlwebster.com<mailto:webs...@carlwebster.com>> wrote: >> Here is the final result with a shout out to Daniel. >> >> >> >> http://carlwebster.com/finding-average-group-policy-processing-time-us >> ing-microsoft-powershell/ >> >> >> >> Thanks >> >> >> >> >> >> Webster >> >> >> >> From: listsadmin@lists.myITforum.com<mailto:listsadmin@lists.myITforum.com> >> [mailto:listsadmin@lists.myITforum.com] >> On Behalf Of Webster >> Sent: Monday, March 7, 2016 2:51 PM >> >> >> To: powersh...@lists.myitforum.com<mailto:powersh...@lists.myitforum.com> >> Subject: [powershell] RE: What event logs are on a system >> >> >> >> Thanks Daniel. That got me headed in the right direction. >> >> >> >> $GPTime = get-winevent -logname >> Microsoft-Windows-GroupPolicy/Operational | where {$_.id -eq "8001"} | >> select message >> >> >> >> Thanks >> >> >> >> >> >> Webster >> >> >> >> From: listsadmin@lists.myITforum.com<mailto:listsadmin@lists.myITforum.com> >> [mailto:listsadmin@lists.myITforum.com] >> On Behalf Of Webster >> Sent: Monday, March 07, 2016 1:35 PM >> To: powersh...@lists.myitforum.com<mailto:powersh...@lists.myitforum.com> >> Subject: [powershell] RE: What event logs are on a system >> >> >> >> Thanks for the pointer. Example 8 should get me started. >> >> >> >> -------------------------- EXAMPLE 8 -------------------------- >> >> >> >> C:\PS>(get-winevent -listprovider >> microsoft-windows-grouppolicy).events | format-table id, description >> -auto >> >> >> >> >> >> Description >> >> ----------- >> >> This command lists the event IDs that the >> Microsoft-Windows-GroupPolicy event provider generates along with the >> eve >> >> nt description. >> >> >> >> It uses the Events property of the object that Get-WinEvent returns >> when you use the ListProvider parameter, and it >> >> uses the ID and Description properties of the object in the Events property. >> >> >> >> >> >> From: listsadmin@lists.myITforum.com<mailto:listsadmin@lists.myITforum.com> >> [mailto:listsadmin@lists.myITforum.com] >> On Behalf Of Daniel Ratliff >> Sent: Monday, March 07, 2016 1:28 PM >> To: powersh...@lists.myitforum.com<mailto:powersh...@lists.myitforum.com> >> Subject: [powershell] RE: What event logs are on a system >> >> >> >> You have to use Get-WinEvent I think for some of the legacy event >> logs. Will see if I can find a reference. >> >> >> >> Daniel Ratliff >> >> >> >> From: listsadmin@lists.myITforum.com<mailto:listsadmin@lists.myITforum.com> >> [mailto:listsadmin@lists.myITforum.com] >> On Behalf Of Webster >> Sent: Monday, March 07, 2016 2:26 PM >> To: powersh...@lists.myitforum.com<mailto:powersh...@lists.myitforum.com> >> Subject: [powershell] RE: What event logs are on a system >> >> >> >> I should have added that get-eventlog -list doesn't give a complete list. >> >> >> >> PS C:\Users\TEMP> get-eventlog -list >> >> >> >> Max(K) Retain OverflowAction Entries Log >> >> ------ ------ -------------- ------- --- >> >> 64 0 OverwriteAsNeeded 1,273 Application >> >> 20,480 0 OverwriteAsNeeded 0 HardwareEvents >> >> 512 7 OverwriteOlder 0 Internet Explorer >> >> 20,480 0 OverwriteAsNeeded 0 Key Management Service >> >> 128 0 OverwriteAsNeeded 1,694 OAlerts >> >> 64 0 OverwriteAsNeeded 1,062 Security >> >> 64 0 OverwriteAsNeeded 2,415 System >> >> 512 0 OverwriteAsNeeded 807 ThinPrint Diagnostics >> >> 15,360 0 OverwriteAsNeeded 19,393 Windows PowerShell >> >> >> >> Thanks >> >> >> >> >> >> Webster >> >> >> >> From: listsadmin@lists.myITforum.com<mailto:listsadmin@lists.myITforum.com> >> [mailto:listsadmin@lists.myITforum.com] >> On Behalf Of Webster >> Sent: Monday, March 07, 2016 1:23 PM >> To: powersh...@lists.myitforum.com<mailto:powersh...@lists.myitforum.com> >> Subject: [powershell] What event logs are on a system >> >> >> >> Using PoSH, how can I get a list of event log names? I am trying to >> get stuff from the group policy log but not having any luck. The gui >> shows the logname as "Microsoft-Windows-GroupPolicy/Operational" but >> get-eventlog doesn't like it. >> >> >> >> PS C:\Users\TEMP> get-eventlog -logname >> "Microsoft-Windows-GroupPolicy/Operational" -computername xxx >> >> Get-EventLog : The event log >> 'Microsoft-Windows-GroupPolicy/Operational' on computer 'xxx' does not exist. >> >> At line:1 char:13 >> >> + get-eventlog <<<< -logname "Microsoft-Windows-GroupPolicy/Operational" >> -computername xxx >> >> + CategoryInfo : NotSpecified: (:) [Get-EventLog], >> InvalidOperationException >> >> + FullyQualifiedErrorId : >> System.InvalidOperationException,Microsoft.PowerShell.Commands.GetEven >> tLogCommand >> >> >> >> PS C:\Users\TEMP> get-eventlog -logname "Microsoft-Windows-GroupPolicy" >> -computername xxx >> >> Get-EventLog : The event log 'Microsoft-Windows-GroupPolicy' on >> computer 'xxx' does not exist. >> >> At line:1 char:13 >> >> + get-eventlog <<<< -logname "Microsoft-Windows-GroupPolicy" >> + -computername >> xxx >> >> + CategoryInfo : NotSpecified: (:) [Get-EventLog], >> InvalidOperationException >> >> + FullyQualifiedErrorId : >> System.InvalidOperationException,Microsoft.PowerShell.Commands.GetEven >> tLogCommand >> >> >> >> Thanks >> >> >> >> >> >> Webster >> >> >> ================================================ >> Did you know you can also post and find answers on PowerShell in the forums? >> http://www.myitforum.com/forums/default.asp?catApp=1 >> >> >> ================================================ >> Did you know you can also post and find answers on PowerShell in the forums? >> http://www.myitforum.com/forums/default.asp?catApp=1 >> >> >> The information transmitted is intended only for the person or entity >> to which it is addressed and may contain CONFIDENTIAL material. If you >> receive this material/information in error, please contact the sender >> and delete or destroy the material/information. >> >> >> ================================================ >> Did you know you can also post and find answers on PowerShell in the forums? >> http://www.myitforum.com/forums/default.asp?catApp=1 >> >> >> ================================================ >> Did you know you can also post and find answers on PowerShell in the forums? >> http://www.myitforum.com/forums/default.asp?catApp=1 >> >> >> ================================================ >> Did you know you can also post and find answers on PowerShell in the forums? >> http://www.myitforum.com/forums/default.asp?catApp=1 >> >> >> ================================================ >> Did you know you can also post and find answers on PowerShell in the forums? >> http://www.myitforum.com/forums/default.asp?catApp=1 > > > ================================================ > Did you know you can also post and find answers on PowerShell in the forums? > http://www.myitforum.com/forums/default.asp?catApp=1 > > > ================================================ > Did you know you can also post and find answers on PowerShell in the forums? > http://www.myitforum.com/forums/default.asp?catApp=1 ================================================ Did you know you can also post and find answers on PowerShell in the forums? http://www.myitforum.com/forums/default.asp?catApp=1 ================================================ Did you know you can also post and find answers on PowerShell in the forums? http://www.myitforum.com/forums/default.asp?catApp=1 ================================================ Did you know you can also post and find answers on PowerShell in the forums? http://www.myitforum.com/forums/default.asp?catApp=1
