Hi Guys,
The first thing I would check is which DC is authenticating the workstation. To check which Server has authenticated the workstation you can use the LOGONSERVER environment variable. To list the environment variables use the SET command from DOS prompt (CMD).
e.g. LOGONSERVER=SERVER1
If this DC in not the local machine you will need to check that all your subnets are configured correctly in sites and services.
Option 2
--------
Mark Russinovich has a good blog entry which details how to use Process Explorer to identify processes that might be taking excessive amounts of time to execute. (The Case of the Slow Logons)
Sorry I cant post links because this is my first post
Good luck.
