+ Post New Thread
Results 1 to 13 of 13
Windows Server 2008 Thread, Staff logins taking far to long caused by bad Group Policy design? in Technical; I have a school network of over 2000 students and around 200 teaching staff. The current time it takes for ...
  1. #1

    Join Date
    Jan 2012
    Location
    Cambridge
    Posts
    35
    Thank Post
    9
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Staff logins taking far to long caused by bad Group Policy design?

    I have a school network of over 2000 students and around 200 teaching staff. The current time it takes for students /staff to authenticate is far too long and I am wondering if some of the issues are caused by the way our Group Policy is setup. We have an OU called User Accounts and within that a sub-OU called Staff. Within the Staff OU there is just a list of all the members of staff throughout the college and they are not split up into departments at all.

    The Group Policy for printing is linked directly to the Staff OU, therefore when a member of staff logs on to a PC, Group Policy runs through a list of a 102 different printers to find the correct printer to install and make available. The other problem is of course that staff keep setting their default printers and then ever 15 minutes or so GP updates and their default printer has been changed again.

    Can anyone please advise on what would be the best way forward?

    Many thanks

    Paul

  2. #2
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,550
    Thank Post
    518
    Thanked 56 Times in 50 Posts
    Rep Power
    30
    Group policy should not change something after the user has logged on? It only applies settings at the time of log on. Any changes from that point will take a log off and on again.
    Have you tried disabling the group policy that is applied to that OU to see if log on times change?
    Could it be a log on script rather than Group policy?

  3. #3

    Join Date
    Jan 2012
    Location
    Cambridge
    Posts
    35
    Thank Post
    9
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I haven't had a chance to disable the Group Policy as this would stop the whole school from printing. I thought that some Group Policy settings updated without the need for a logon? Apologies if I misunderstood. Pretty sure there isn't a script involved in the printing process, I have only been here a week though so still trying to find my away around.

    Paul

  4. #4
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,550
    Thank Post
    518
    Thanked 56 Times in 50 Posts
    Rep Power
    30
    Your script may not set the printers, it doesn't have to, but as your original problem was log on times I just thought you could at least problem shoot to see if it application of group policy that is the issue.

  5. #5

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,309
    Thank Post
    901
    Thanked 1,797 Times in 1,548 Posts
    Blog Entries
    12
    Rep Power
    466
    What screen do the machines get stuck on during login?

    What client os?

  6. #6

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,613
    Thank Post
    746
    Thanked 1,706 Times in 1,519 Posts
    Rep Power
    437
    @reggiep gp does update while a computer is in use.

    Group Policy refresh interval for computers

    Thing such as login/logoff scripts will only run at those times though.

    Ben

  7. #7

    Join Date
    Feb 2007
    Location
    Four Oaks
    Posts
    283
    Thank Post
    37
    Thanked 10 Times in 9 Posts
    Rep Power
    21
    First enable Verbose logging mode to see where the logon is slowest, this will help identify the problem area
    Enable Verbose Global Policy Logging

    check event logs on the devices for errors when logging on - failed redirections etc ...any gpos that fail to apply will be logged.

    run rsop.msc on a computer and check that for errors as well.

    also dont forget to check for dns issues, a simple nslookup on the computer will point out any dns issues

    lastley dont overlook a simpel ping test, ping the dc (s) and check the response time.

  8. #8

    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,830
    Thank Post
    219
    Thanked 271 Times in 219 Posts
    Rep Power
    69
    What are the users profile sizes? This is always causes headaches. Create a user with no roaming profile and see how long it takes. Also check your default user profile size, maybe it's been altered.

  9. #9

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,309
    Thank Post
    901
    Thanked 1,797 Times in 1,548 Posts
    Blog Entries
    12
    Rep Power
    466
    Also check your default user profile size, maybe it's been altered.
    That would only count on the first ever logon of a computer, not every logon.

  10. #10

    Join Date
    Jan 2012
    Location
    Cambridge
    Posts
    35
    Thank Post
    9
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    All clients are running Windows 7.

  11. #11
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,550
    Thank Post
    518
    Thanked 56 Times in 50 Posts
    Rep Power
    30
    Quote Originally Posted by plexer View Post
    @reggiep gp does update while a computer is in use.

    Group Policy refresh interval for computers

    Thing such as login/logoff scripts will only run at those times though.

    Ben
    Sorry, I stand corrected! In my defence I did know they do but there is a decent enough gap before they do update, is it 90 minutes for some and up to 16 hours for others?


  12. #12

    Join Date
    Jan 2012
    Location
    Cambridge
    Posts
    35
    Thank Post
    9
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I believe you can alter the refresh rates within Group Policy. I have just been running a test and added two additional networked printers. Went back to check on them 30 minutes later and they had been uninstalled.

  13. #13

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,349
    Thank Post
    1,489
    Thanked 2,573 Times in 1,789 Posts
    Rep Power
    774
    If you enable verbose logging I bet it is the printers that are the issue



SHARE:
+ Post New Thread

Similar Threads

  1. How To Guide: Deploy VNC via Group Policy
    By FN-GM in forum Network and Classroom Management
    Replies: 49
    Last Post: 11th April 2013, 09:38 AM
  2. How to install the Office 2010 Group Policy Templates?
    By ihaveaproblem in forum Windows Server 2008 R2
    Replies: 6
    Last Post: 12th September 2011, 09:39 PM
  3. How far to take interactivity?
    By mossj in forum EduGeek Joomla 1.5 Package
    Replies: 6
    Last Post: 19th March 2009, 04:07 PM
  4. Sort By Name Group Policy
    By mattpant in forum Wireless Networks
    Replies: 6
    Last Post: 16th November 2005, 03:59 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •