Is there a list of steps to diagnose slow logins on Windows 10?

[zx2012]

Is there a list of steps to diagnose slow logins on Windows 10?

 

We're running Windows Server 2016 version 1607.

Most of our PCs are on Windows 10 2004 or 1909. Some are still on 1903.

 

When children log in it can take 7+ minutes to log in.

 

ON the screen the last message either Preparing Windows or the name of the last GPO to be applied.

[3s-gtech]

Client PC spec? Profile type? Any logon scripts or installers?

[sigma]

Is there a list of steps to diagnose slow logins on Windows 10?

 

We're running Windows Server 2016 version 1607.

Most of our PCs are on Windows 10 2004 or 1909. Some are still on 1903.

 

When children log in it can take 7+ minutes to log in.

 

ON the screen the last message either Preparing Windows or the name of the last GPO to be applied.

 

So it's readying the first time profile.

 

Wired or wireless?

[sted]

new ou and users then try with no gpos then slowly add them back in?

[Davit2005]

Have you got a basic windows 10 desktop with no customisations or third party management tools installed?

 

Try logging in a student with safe mode and networking and see if experience is any different.

[zx2012]

Many thanks for your suggestions.

 

>>Client PC spec?

Dell Optiplex ranging from 745,755,380,760,780,7010 and 3040

Some have 2GB of RAM, most have 4GB,6GB or 8GB.

All have SSDs

 

>>Profile type?

Roaming I think with everything redirected except for %APPDATA%

 

>>Any logon scripts or installers?

Is there a way to find a list of each?

 

>>Wired or wireless?

Wired

 

>>new ou and users then try with no gpos then slowly add them back in?

Will give this a go

 

>>Have you got a basic windows 10 desktop with no customisations or third party management tools installed?

Just Windows 10 Education with Sophos from LGFL.

[psydii]

Try this tool:

 

https://illuminati.services/2019/09/20/how-to-boot-trace-windows-10-using-the-in-box-wpr-exe-no-install-needed/

 

You will need the Windows Perfomance Analyzer from the Microsoft Store to open up the trace file.

 

This will show you everything the computer is doing. Look for long gaps or processes that take a long time to complete.

 

Probably worth running it on an a vanilla non-domain joined PC, and a PC joined to the domain but in a OU with Gpolicy inheritance blocked.

 

However a quick look through event viewer->Application and Services Logs->Microsoft->GroupPolicy->Operational might help you identify policies that are taking a long time to apply. You can then cross reference the time markers to narrow down *exactly* what is taking the most time.

 

Typical things I have seen are:

1) Files or Shares that no longer exist or are unaccessable (either permissions, deleted items, decomissioned server, or Anti-Virus blocking things)

2) Provisioning Apps from the Store - particlualry if this has been slightly broken when building the base OS image.

3) Folder Redirection / Offline files moving or syncing folders.

[robyholmes]

Try without a roaming profile. You really need to move away from them but it might be the only issue.

[computer_expert]

The optiplex 745 and 380s are going to be slow with SSDs & 4GB ram anyway (the remaining 380s I have range from extremely slow to slow). Sophos doesn't help either.

 

Do you have any legacy startup/logon scripts pointing to slow to respond or decomissioned servers?

Do you use group policy preferences to map printers? This can take a while with a large amount of printers needing different drivers

[bald_pig]

This is what Windows Performance Recorder is designed for, it can show you how long each part of login is taking:

https://docs.microsoft.com/en-us/windows-hardware/test/wpt/windows-performance-recorder

[Davit2005]

The optiplex 745 and 380s are going to be slow with SSDs & 4GB ram anyway (the remaining 380s I have range from extremely slow to slow). Sophos doesn't help either.

 

Do you have any legacy startup/logon scripts pointing to slow to respond or decomissioned servers?

Do you use group policy preferences to map printers? This can take a while with a large amount of printers needing different drivers

 

++ This

 

If you are removing printers with GPP this in itself can slow login times.

 

Another vote to move away from Roaming Profiles here though. From my experiences they are almost as much trouble as they are worth.