I've been following this thread very closely as we've experienced extremely slow logins and yes we use the roaming profile and home directory settings on the profile tab in ADU&C. Does anyone know what the statement, "When a user has a roaming user profile or a home directory for logon purposes", actually means? Specifically the part, for logon purposes? Does it just mean that if the user has a home directory or profile defined or something totally different? Also, what is the recommended way to do home directory mapping and profiles, if not in the profile tab? >From some of the links, I'm guessing a group policy preference, but not sure.
-----Original Message----- From: Free, Bob [mailto:[email protected]] Sent: Tuesday, March 13, 2012 11:11 AM To: NT System Admin Issues Subject: RE: (homedrive) Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.210.3.203] Content-Type: multipart/alternative; boundary="_000_748CF90EABA4224ABF3D957402E1271515146A84EXCHMBFF123Util_" MIME-Version: 1.0 X-CFilter-Loop: Forwarded --_000_748CF90EABA4224ABF3D957402E1271515146A84EXCHMBFF123Util_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Better link than the one from MSDN http://technet.microsoft.com/en-us/library/cc758898(v=3Dws.10).aspx Fast Logon Optimization is always off during logon under the following cond= itions: When a user *first* logs on to a computer. (the MSDN link leaves out the o= perative word...doh) When a user has a roaming user profile or a home directory for logon purpos= es. When a user has synchronous logon scripts. From: Free, Bob Sent: Tuesday, March 13, 2012 7:39 AM To: 'NT System Admin Issues' Subject: RE: (homedrive) When he told us about it, I figured out the reg keys associated with logon = optimization from something Darren had blogged and tested it and sure enoug= h, when I removed the logon script and home folder in ADUC and rebooted 2x = the key changed state, my logon was faster and without the "applying your s= ettings" screen or whatever it is on XP. This guy knew his stuff about slo= w logons and gave us a whirlwind tour of xperf from another customer engage= ment. Very cool tool. Unbelievable amount of detail about startup is availa= ble from it. I did a cursory search back then for something more authoritative than "thi= s PFE told me" and found this http://msdn.microsoft.com/en-us/library/windo= ws/desktop/aa374350(v=3Dvs.85).aspx I haven't had time to visit it further but one of our very sharp desktop gu= ys is. The above is all null and void if you are planning on blaming AD for the mi= sbehavior of Citrix :-p From: Webster [mailto:[email protected]]<mailto:[mailto:webster@carlw= ebster.com]> Sent: Tuesday, March 13, 2012 4:03 AM To: NT System Admin Issues Subject: RE: (homedrive) Bob, I am giving a Geek Speak session at Citrix Synergy in May. My GoogleFu isn= 't turning up anything on this. I would like to add this to my "It's Not C= itrix, It's Your !@#$%^& AD" talk. (well I was told I can't use that title= but that is what I call it. Actually I think that was MBS' idea for my se= ssion title.) Do you have a reference for this I could link to in my talk or maybe even s= end me a LMGTFY link? Thanks Carl Webster Consultant and Citrix Technology Professional http://www.CarlWebster.com From: Free, Bob [mailto:[email protected]]<mailto:[mailto:[email protected]]> Subject: RE: (homedrive) We had a PSS PFE onsite recently for an AD engagement and we were discussin= g slow boots during a break in the action and he brought up something I had= never heard of before. I was always under the assumption that we had what is known as Fast Logon O= ptimization on our XP systems that allows GPOs to process asynchronously in= the background. He told us that it is disabled in our environment because we use the profil= e settings to map homeDir and specify login script. Basically anything that is set on the Profile tab in ADUC is considered leg= acy NT behavior and disables logon optimization. I had heard before that ro= aming profiles or software installation policies disabled it but this was n= ews to me. I played around with my account on an old XP box and it rang tru= e, never got around to looking into it further or on WIN7. FWIW, YMMV :) ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/= my_forums/ or send an email to [email protected]<mailto:listmanage= [email protected]> with the body: unsubscribe ntsysadmin --_000_748CF90EABA4224ABF3D957402E1271515146A84EXCHMBFF123Util_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"; xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style><!-- /* Font Definitions */ @font-face {font-family:Wingdings; panose-1:5 0 0 0 0 0 0 0 0 0;} @font-face {font-family:Wingdings; panose-1:5 0 0 0 0 0 0 0 0 0;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} @font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4;} @font-face {font-family:Consolas; panose-1:2 11 6 9 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri","sans-serif";} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;} p.MsoPlainText, li.MsoPlainText, div.MsoPlainText {mso-style-priority:99; mso-style-link:"Plain Text Char"; margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri","sans-serif";} p {mso-style-priority:99; mso-margin-top-alt:auto; margin-right:0in; mso-margin-bottom-alt:auto; margin-left:0in; font-size:12.0pt; font-family:"Times New Roman","serif";} p.MsoAcetate, li.MsoAcetate, div.MsoAcetate {mso-style-priority:99; mso-style-link:"Balloon Text Char"; margin:0in; margin-bottom:.0001pt; font-size:8.0pt; font-family:"Tahoma","sans-serif";} span.BalloonTextChar {mso-style-name:"Balloon Text Char"; mso-style-priority:99; mso-style-link:"Balloon Text"; font-family:"Tahoma","sans-serif";} span.EmailStyle20 {mso-style-type:personal; font-family:"Calibri","sans-serif"; color:windowtext;} span.EmailStyle21 {mso-style-type:personal; font-family:"Calibri","sans-serif"; color:#1F497D;} span.EmailStyle22 {mso-style-type:personal; font-family:"Calibri","sans-serif"; color:#1F497D;} span.EmailStyle23 {mso-style-type:personal; font-family:"Calibri","sans-serif"; color:#1F497D;} span.EmailStyle24 {mso-style-type:personal; font-family:"Calibri","sans-serif"; color:#1F497D;} span.EmailStyle25 {mso-style-type:personal-reply; font-family:"Calibri","sans-serif"; color:#1F497D;} span.PlainTextChar {mso-style-name:"Plain Text Char"; mso-style-priority:99; mso-style-link:"Plain Text"; font-family:"Calibri","sans-serif";} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--> </head> <body lang=3D"EN-US" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Better link than the o= ne from MSDN<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoPlainText"><a href=3D"http://technet.microsoft.com/en-us/lib= rary/cc758898(v=3Dws.10).aspx">http://technet.microsoft.com/en-us/library/c= c758898(v=3Dws.10).aspx</a><o:p></o:p></p> <p class=3D"MsoPlainText"><o:p> </o:p></p> <p class=3D"MsoPlainText">Fast Logon Optimization is always off during logo= n under the following conditions: <o:p></o:p></p> <p class=3D"MsoPlainText"><o:p> </o:p></p> <p class=3D"MsoPlainText">When a user *<b><span style=3D"background:yellow;= mso-highlight:yellow">first</span></b>* logs on to a computer. (the M= SDN link leaves out the operative word…doh)<o:p></o:p></p> <p class=3D"MsoPlainText"><o:p> </o:p></p> <p class=3D"MsoPlainText"><o:p> </o:p></p> <p class=3D"MsoPlainText">When a user has a roaming user profile or a home = directory for logon purposes. <o:p></o:p></p> <p class=3D"MsoPlainText"><o:p> </o:p></p> <p class=3D"MsoPlainText"><o:p> </o:p></p> <p class=3D"MsoPlainText">When a user has synchronous logon scripts.<o:p></= o:p></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <div> <div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in = 0in 0in"> <p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"= ;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s= ize:10.0pt;font-family:"Tahoma","sans-serif""> Free, Bo= b <br> <b>Sent:</b> Tuesday, March 13, 2012 7:39 AM<br> <b>To:</b> 'NT System Admin Issues'<br> <b>Subject:</b> RE: (homedrive)<o:p></o:p></span></p> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">When he told us about = it, I figured out the reg keys associated with logon optimization from some= thing Darren had blogged and tested it and sure enough, when I removed the = logon script and home folder in ADUC and rebooted 2x the key changed state, my logon was faster and without the= “applying your settings” screen or whatever it is on XP. = This guy knew his stuff about slow logons and gave us a whirlwind tour of = xperf from another customer engagement. Very cool tool. Unbelievable amount of detail about startup is available from it.<o:= p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">I did a cursory search= back then for something more authoritative than “this PFE told me= 221; and found this <a href=3D"http://msdn.microsoft.com/en-us/library/windows/desktop/aa374350= (v=3Dvs.85).aspx"> http://msdn.microsoft.com/en-us/library/windows/desktop/aa374350(v=3Dvs.85)= .aspx</a><o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">I haven’t had ti= me to visit it further but one of our very sharp desktop guys is.<o:p></o:p= ></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">The above is all null = and void if you are planning on blaming AD for the misbehavior of Citrix :-= p<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <div> <div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in = 0in 0in"> <p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"= ;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s= ize:10.0pt;font-family:"Tahoma","sans-serif""> Webster <a href=3D"mailto:[mailto:[email protected]]";>[mailto:webster@carlweb= ster.com]</a> <br> <b>Sent:</b> Tuesday, March 13, 2012 4:03 AM<br> <b>To:</b> NT System Admin Issues<br> <b>Subject:</b> RE: (homedrive)<o:p></o:p></span></p> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Bob,<o:p></o:p></span>= </p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">I am giving a Geek Spe= ak session at Citrix Synergy in May. My GoogleFu isn’t turning = up anything on this. I would like to add this to my “It’s= Not Citrix, It’s Your !@#$%^& AD” talk. (well I was = told I can’t use that title but that is what I call it. Actually I think that was= MBS’ idea for my session title.)<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Do you have a referenc= e for this I could link to in my talk or maybe even send me a LMGTFY link?<= o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Thanks<o:p></o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <div> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Carl Webster<br> Consultant and Citrix Technology Professional<br> <a href=3D"http://www.CarlWebster.com"; target=3D"_blank">http://www.CarlWeb= ster.com</a><o:p></o:p></span></p> </div> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <div style=3D"border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in = 4.0pt"> <div> <div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in = 0in 0in"> <p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"= ;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s= ize:10.0pt;font-family:"Tahoma","sans-serif""> Free, Bo= b <a href=3D"mailto:[mailto:[email protected]]";>[mailto:[email protected]]</a> <br> <b>Subject:</b> RE: (homedrive)<o:p></o:p></span></p> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><span style=3D"color:black">We had a PSS PFE onsite = recently for an AD engagement and we were discussing slow boots during a br= eak in the action and he brought up something I had never heard of before.<= o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:black"> <o:p></o:p></span>= </p> <p class=3D"MsoNormal"><span style=3D"color:black">I was always under the a= ssumption that we had what is known as Fast Logon Optimization on our XP sy= stems that allows GPOs to process asynchronously in the background.<o:p></o= :p></span></p> <p class=3D"MsoNormal"><span style=3D"color:black"> <o:p></o:p></span>= </p> <p class=3D"MsoNormal"><span style=3D"color:black">He told us that it is di= sabled in our environment because we use the profile settings to map homeDi= r and specify login script. <o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:black"><o:p> </o:p></span>= </p> <p class=3D"MsoNormal"><span style=3D"color:black">Basically anything that = is set on the Profile tab in ADUC is considered legacy NT behavior and disa= bles logon optimization. I had heard before that roaming profiles or softwa= re installation policies disabled it but this was news to me. I played around with my account on an old XP box = and it rang true, never got around to looking into it further or on WIN7.<o= :p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:black"><o:p> </o:p></span>= </p> <p class=3D"MsoNormal"><span style=3D"color:black">FWIW, YMMV </span><span = style=3D"font-family:Wingdings;color:black">J</span><span style=3D"color:bl= ack"><o:p></o:p></span></p> </div> <p>~ Finally, powerful endpoint security that ISN'T a resource hog! ~<br> ~ <<a href=3D"http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/"= >http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/</a>> >~<= br> <br> ---<br> To manage subscriptions click here: <a href=3D"http://lyris.sunbelt-softwar= e.com/read/my_forums/"> http://lyris.sunbelt-software.com/read/my_forums/</a><br> or send an email to <a href=3D"mailto:[email protected]= ">[email protected]</a><br> with the body: unsubscribe ntsysadmin<o:p></o:p></p> </div> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ <BR> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ <BR> <BR> --- <BR> To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ <BR> or send an email to [email protected] <BR> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ <BR> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ <BR> <BR> --- <BR> To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ <BR> or send an email to [email protected] <BR> with the body: unsubscribe ntsysadmin </BODY> </html> --_000_748CF90EABA4224ABF3D957402E1271515146A84EXCHMBFF123Util_--
