{"id":1627,"date":"2017-04-24T12:25:00","date_gmt":"2017-04-24T12:25:00","guid":{"rendered":"http:\/\/neu.koetzingit.de\/einfache-fehleranalyse-der-dauer-von-gruppenrichtlinien-waehrend-der-anmeldung\/"},"modified":"2026-06-02T13:32:50","modified_gmt":"2026-06-02T13:32:50","slug":"einfache-fehleranalyse-der-dauer-von-gruppenrichtlinien-waehrend-der-anmeldung","status":"publish","type":"post","link":"https:\/\/www.koetzingit.de\/en\/einfache-fehleranalyse-der-dauer-von-gruppenrichtlinien-waehrend-der-anmeldung\/","title":{"rendered":"Simple troubleshooting of Group Policy startup duration during logon"},"content":{"rendered":"

D<\/span>The use of Group Policy instead of long and complicated logon scripts is becoming increasingly common. I often help clients migrate their logon scripts to Microsoft Group Policy, which offers many advantages. Nevertheless, Group Policy can slow down the logon process for various reasons. Recently, one of my clients an easy way<\/strong> displayed to analyze logins related to group policies.<\/p>\n

<\/p>\n

How do I know if too much time is being spent on Group Policy? To help you gauge this better, here are my rough estimates for GPO login times.<\/p>\n

    \n
  1. A minimum GPO set takes about 1\u20133 seconds<\/li>\n
  2. The GPO cycle takes about 4\u20136 seconds<\/li>\n
  3. The maximum GPO rate should not exceed approximately.\u00a07\u20139 seconds<\/strong><\/li>\n<\/ol>\n

    When reviewing the login duration in Citrix Director, I immediately spotted a few issues, and with one of them, I knew right away what the problem was. There were interactive sessions lasting over 100 seconds, with GPO durations of 15 and 18 seconds. My suspicion regarding the interactive session was a login script, and I was right. At the end of the login script, local printer drivers were being \u201ecleaned up,\u201c and for some reason, the script got stuck there. After we skipped that part, the duration of the interactive session returned to normal values.<\/p>\n

    But what about the GPO times, and why is it taking so long? There\u2019s an easy way to find out, and you don\u2019t need any special tools\u2014just what the system has to offer. First, you need to find the user\u2019s logon time and target system, e.g., via the Director or whatever tool you use. Then open the event log on the target system and go to\u00a0 Application and Service Logs | Microsoft | Windows | Group Policy <\/code>Scroll down here to the user's login time. Look for Event 5324 (the login notification), which will only contain the user's session ID. Then verify that the session ID actually belongs to the user, e.g., using \u201equser.\u201c.<\/p>\n

    \"News<\/p>\n

    Next slowly and patiently<\/strong> Scroll up, and you should be able to see how the system downloads the relevant GPOs from the domain controller. The GPOs are then processed one by one, and the duration for each step is listed in milliseconds. This means that anything taking more than 1,000 ms might be worth investigating further. For the customer, I found two different issues for two different users. In the first case, it took about 8,000 ms to process a GPO, which means more than half<\/strong> the whole time! After reviewing the GPO, I found a setting for connecting a network drive over a WAN connection. However, the WAN wasn\u2019t the problem; rather, the FQDN wasn\u2019t used for the share, so the system couldn\u2019t resolve the server name. This meant the network drive couldn\u2019t be connected, leading to an 8-second timeout and error, which was also documented in the details.<\/p>\n

    \u00a0<\/p>\n

    The second problem was that 11 seconds out of a total of 18 seconds<\/strong> for processing the GPO. This time, a network printer was connected via WAN via RPC<\/strong> and that's the worst thing you can do. We removed the entire thing and integrated the network printer using Citrix Client print mapping and indirect printing. After that, the total Group Policy processing time was down to just 7 seconds, which is within a normal range.<\/p>\n

    \"News<\/p>\n

    This is just a sample event, and it took 2.6 seconds to process the print job<\/em><\/p>\n

    It only took a few minutes to identify and resolve these three issues (far less time than it took to write about them). I hope this has shown just how simple yet effective analyzing Group Policy processing can be.<\/p>","protected":false},"excerpt":{"rendered":"

    Die Verwendung von Gruppenrichtlinien anstelle von langen und komplizierten Anmeldeskripten wird mehr und mehr genutzt. Ich\u00a0migriere oft f\u00fcr Kunden deren […]<\/p>\n","protected":false},"author":1755,"featured_media":1482,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[23],"tags":[27,203,174,80,204,32,33,202,122],"class_list":["post-1627","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-de","tag-citrix","tag-drives","tag-gpo","tag-group","tag-mappings","tag-microsoft","tag-policy","tag-printer","tag-slow-logon"],"uagb_featured_image_src":{"full":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2016\/01\/news-man-typing-whilst.jpg",360,360,false],"thumbnail":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2016\/01\/news-man-typing-whilst-150x150.jpg",150,150,true],"medium":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2016\/01\/news-man-typing-whilst-300x300.jpg",300,300,true],"medium_large":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2016\/01\/news-man-typing-whilst.jpg",360,360,false],"large":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2016\/01\/news-man-typing-whilst.jpg",360,360,false],"1536x1536":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2016\/01\/news-man-typing-whilst.jpg",360,360,false],"2048x2048":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2016\/01\/news-man-typing-whilst.jpg",360,360,false],"trp-custom-language-flag":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2016\/01\/news-man-typing-whilst.jpg",12,12,false]},"uagb_author_info":{"display_name":"Thomas K\u00f6tzing","author_link":"https:\/\/www.koetzingit.de\/en\/author\/thomas-koetzing\/"},"uagb_comment_info":0,"uagb_excerpt":"Die Verwendung von Gruppenrichtlinien anstelle von langen und komplizierten Anmeldeskripten wird mehr und mehr genutzt. Ich\u00a0migriere oft f\u00fcr Kunden deren […]","_links":{"self":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/posts\/1627","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/users\/1755"}],"replies":[{"embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/comments?post=1627"}],"version-history":[{"count":1,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/posts\/1627\/revisions"}],"predecessor-version":[{"id":1880,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/posts\/1627\/revisions\/1880"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/media\/1482"}],"wp:attachment":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/media?parent=1627"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/categories?post=1627"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/tags?post=1627"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}