Hi,
We are running windows server 2012R2 on 2 domain controllers, and a terminal server environment. The system has only been up since the beginning of the year. At the start logon times were well under 10 seconds (Never timed it as wasn't an issue). However as of Last Thursday logon times have blown out to between 1 - 1.5 minutes.
There were no changes to policy that I'm aware of at the time. But there have been plenty since while trying to troubleshoot this. I have denied a user permissions to apply any group policy's that include "preferences" and their logon time drops down to about 2 seconds.
The group policies are designed in a way that I can apply a single group policy that only includes registry extensions, or drive mappings, or folder options. By doing this I can confirm that it IS the preferences causing the issue, and it doesn't matter if its a drive mapping, registry preference or other. They all suffer the same problem. With logging and tracing enabled for drive mappings, or registry preferences it all runs smoothly up until "Settings update set as user" at which point the processing hangs for between 20 and 40 seconds before continuing on. The drives have all be mapped by this stage and can be access while the process is hung so its not working on mapping the drives. It seems to just hang doing nothing except holding up the logon process.
Logs from the User.log trace file
2016-01-29 16:00:37.972 [pid=0x24c,tid=0x1c08] Completed logging of RSoP data.
2016-01-29 16:00:37.973 [pid=0x24c,tid=0x1c08] Completed commit reporting.
2016-01-29 16:00:37.973 [pid=0x24c,tid=0x1c08] Completed GPO list post-processing.
2016-01-29 16:00:37.973 [pid=0x24c,tid=0x1c08] Completed get GPO list. [SUCCEEDED(S_FALSE)]
2016-01-29 16:00:37.973 [pid=0x24c,tid=0x1c08] Starting csePostProcess
2016-01-29 16:00:37.973 [pid=0x24c,tid=0x1c08] IsRsopPlanningMode() [SUCCEEDED(S_FALSE)]
2016-01-29 16:00:37.974 [pid=0x24c,tid=0x1c08] IsWinlogonDesktop() [SUCCEEDED(S_FALSE)]
2016-01-29 16:00:37.974 [pid=0x24c,tid=0x1c08] Starting settings update (csePostProcess).
2016-01-29 16:00:37.974 [pid=0x24c,tid=0x1c08] Settings update set as User.
2016-01-29 16:00:52.801 [pid=0x24c,tid=0x1c08] Completed settings update (csePostProcess).
2016-01-29 16:00:52.801 [pid=0x24c,tid=0x1c08] Completed csePostProcess
2016-01-29 16:00:52.801 [pid=0x24c,tid=0x1c08] Completed CSE post-processing.
2016-01-29 16:00:52.801 [pid=0x24c,tid=0x1c08] User impersonation uninitialized.
2016-01-29 16:00:52.806 [pid=0x24c,tid=0x1c08] Leaving ProcessGroupPolicyExDrives() returned 0x00000000
2016-01-29 16:00:52.806 [pid=0x24c,tid=0x1c08]
Running procmon and monitoring the procID 0x24c shows that it just stops doing anything for that period of time.
Has anyone seen this, or know where to go from here to continue troubleshooting?