Slow Logons (5 minutes+)

[Homer]

Morning all

 

I'm in need of help... we're currently dealing with an issue where logon times on mobile devices are taking in excess of 90 seconds to log on - sometimes taking up to 5 minutes.

 

Nothing has really changed, no issues are present within layer 2 or 3 that I am aware of, nothing has changed server side apart from updates and the clients are all running a standard image which was rolled out over the summer however issues have only come to light over the past 2 or 3 weeks (which makes me think something has changed - but I don't think anything has and I can't find anything changed!)

 

So I am running out of ideas, a performance trace shows the explorer init stage taking a really long time to complete (3.15 of a 4.58 logon) the winlogon init isn't too bad at 74 seconds although this is also a little excessive.

 

I've re-written user and computer GPO's and kept them as lean as I can possibly make them, I have tested with and without mandatory profiles made either the dodgy way or the official copy profile way using sys prep. I have tested on wireless and wired with very similar results and also find at times desktops and virtual desktops also show excessive logon times although not to the same degree. I've disabled A/V (Windows Defender managed with SCCM), made sure updates are managed by SCCM and me and also tried logon to a bare bones Windows install with no apps or imaging. All of my images have the Windows AppX's packages removed and general cruft cleared out.

 

So what am I missing? It's not right but I can't put my finger on why! Any suggestions are welcome as I know I am missing something but for the life of me can't think what

 

Please help

[DCUK6]

We had many issues with 8.1-10 with slow logins, even verbose logging didnt helped. Cant remember where it got stuck now.

I did a few things that helped but never solved the issues.

 

In the end we went back to win 7.

 

 

-Turn on UseProfilePathExtensionVersion, this uses a different path for win 8 profiles to win 7 to avoid problems

 

-Remove all non needed windows programs using a powershell scripts including

$AppsList = "microsoft.windowscommunicationsapps","Microsoft.BingMaps",`"Microsoft.BingWeather","Microsoft.ZuneVideo","Microsoft.ZuneMusic","Microsoft.Media.PlayReadyClient.2",`"Microsoft.XboxLIVEGames","Microsoft.HelpAndTips","Microsoft.BingSports",`"Microsoft.BingNews","Microsoft.BingFoodAndDrink","Microsoft.BingTravel","Microsoft.WindowsReadingList",`"Microsoft.BingHealthAndFitness","Microsoft.WindowsAlarms","Microsoft.Reader",`"Microsoft.SkypeApp"

 

- Set Startup policy processing wait time to 5 secs

 

Just doing some reading and theres also a logon script that included

Hello date/time" dialogue box ( wscript.echo )

that hangs. Try turning down the logon script delay. Edited November 21, 2016 by DCUK6

[Homer]

Thanks mate - already doing all that we're a Win8/10 exclusive network and until recently not had many problems. All cruft has been cut out and the startup wait is on too or lots of moaning about no network connectivity and I've cut out logon scripts too

 

Still rubbish

[Cazale]

Have you left any drivers/programs deploying through a group policy?

[DCUK6]

Its weird, if its been running fine until recently my guess would be a update.

 

The bare bones install, did it have windows updates installed. Try one without updates and just gpo settings.

There doesnt seem to be anyone reporting anything new regarding this in the last month.

 

Will let someone else chip in and see what they say.

Going to be prob moving to win 10 soon. If not here, somewhere else depending where i am.

[Homer]

Well I thought updates too it's the most logical thing but even deployed from the image (updated in Aug 16) it's doing it so not so sure. Did a bare bones no updates install with just GPO applied and very similar once again so even more confusing! Also took Impero off in case it was that and no luck.

 

No drivers or programs deploying through GPO, scaled back as much as I possibly can out of GPO for testing but just no success

 

Just trying my Win10 image to see what happens with that

 

Keep throwing ideas there has to be something I've missed

[DCUK6]

Have you checked the DC/File to see what the cpu and memory are like.

 

Few weeks ago we were experiencing everything really slow. Impero had hung on the server eating all the CPU.

 

Also check the server logs, we had a failed DC about 6 months ago. The main server gave up logging everyone a few weeks back finally saying something was up as i never took it out of the AD.

 

 

Do you have Software Restriction Policies setup? Are all your DC's added in? When i first put it in here i only stuck the first DC in so when the laptops tried to use the second it took years to login but it took a little while for it to show.

 

 

Also, have you check your file transfer speed to check the switches?

 

Tried entering the DNS address manually?

Edited November 21, 2016 by DCUK6

[Homer]

Yep checked all of that and about normal and the host not overloaded either so that checked out as well. No SRP but Applocker is set and working fine, and file transfer is OK and no saturated links - DNS all resolves properly too

 

I have made a break through... a drive map may be the root of my problems as when it's taken out (been deconstructing the GPO line by line) the logon times drop from 4m50s to 1m30s on mobile and 50s on desktops (35s on vdi with ssd)

 

Put my new policy in to place for now and I'll do some messing tomorrow to nail that issue down

 

Very odd

[psydii]

https://blogs.technet.microsoft.com/jeff_stokes/2012/02/20/windows-7-slow-boot-slow-logon-why-i-do-what-i-do/

Which is a bit of a deep dive but well worth it.

 

 

 

https://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-39-Windows-Performance-Toolkit

 

For a video based introduction to the tools.

 

 

 

However if I were to guess, I'd suggest that it was caused by anti-virus, or attempts to connect to a now defunct share (printer or folder)

 

EDIT: starting writing this before your 1630 update. Seems you've found the problem!

Edited November 21, 2016 by psydii

[Homer]

When I ran that there was a lot of not much going on... no real clues as to what could be going on which was odd. Login times are down to betweeen 1m30s-2m for a logon from boot and 30-40s for a system that's been up for a bit

 

Moved on to other stuff for the minute but I am going to come back on this and try to diagnose what on earth was causing this