Apply Security Policies

[Sandeep Thakker]

I have couple of users who's been reporting that their computer takes long
time to reboot and the boot up screen hangs on the screen Applying Security
Settings/Policy. It does not do every single time. they both are using P4
machines and it may reboot in two minutes and sometimes might take 7/8
minutes. I just have updates applying to all pcs every month thru WSUS. One
user is using Windows 2000 and another one is using Windows XP. I know it
goes thru the Active Directory policies and applying or making sure that
everything is uptodate. But how can I convince these two users. I need to
direct them to some documentation.
Thanks

 

[Roger Abell [MVP]]

7 to 8 minutes is excessive.
Even if it were the WSUS updates installing they would be
allowed to log in while that was happening.

Have you verified that they are using ONLY the correct
DNS servers (and, if WINS is in use in your environment
that they have that also configured)??

 

[Sandeep Thakker]

We have only two dns servers and they both Win2K3/DCs/Active Directory
Catelogs
We do not have any Wins. DHCP provides all the DNS Settings.

 

[Steven L Umbach]

In addition to Roger's advice check the logs via Event Viewer for the times
when this happens and particularly look in the application log for userenv
errors/warnings. As Roger indicated this often is a dns problem or
connectivity problem to a domain controller. You can also find more
specific information on Group Policy processing in the userenv.log in the
\winnt\debug\usermode folder and debug logging can be enabled for much more
detail but as is the userenv.log will show if there was a problem contacting
a domain controller. --- Steve

 

[Roger Abell [MVP]]

That is good, but are the clients that show this sluggishness set
with only those DNS servers in their Tcp/Ip config ???