That’s a good point.  In some cases though, it should be noted that a second 
relogin may be required before new GP settings are applied, but it definitely 
makes the user experience better.  We use this on laptops (since otherwise they 
take a long time trying to connect to the network).

Another thing to consider is if Win7 is involved here, to check whether the 
Enterprise rollup kb 2775511 was installed.  I recall that there was a bug 
where if a GPP contained a query against AD, that it would take a very long 
time to process.

You may have already come across this, but just in case, here are some general 
pointers that summarize several of the suggestions pointed out: 
http://blogs.technet.com/b/grouppolicy/archive/2013/05/23/group-policy-and-logon-impact.aspx

-Aakash Shah

From: [email protected] [mailto:[email protected]] On 
Behalf Of Nathan Shelby
Sent: Thursday, August 13, 2015 10:38 AM
To: [email protected]
Subject: Re: [NTSysADM] Streamlining GPOs

Any chance you are forcing synchronous application of GPO? Unless required, you 
should let them go asynchronously and the user experience will be better 
(they'll get a desktop before all policy objects apply)


Nathan Shelby
Director of Systems Engineering – Quote Wizard<https://quotewizard.com/>
[email protected]<mailto:[email protected]> / 206-753-2626
Malo Periculosam Libertatem Quam Quietum Servitium

On Thu, Aug 13, 2015 at 10:29 AM, Kelsey, John 
<[email protected]<mailto:[email protected]>> wrote:
We’re seeing significant logon delays due to the high number of GPOs that have 
to get processed when a user logs in.  We’re trying to clean up and reduce the 
number of things that have to happen in order to get the user logged on faster. 
 If we block all GPOs in our testing, we’ve been able to cut the logon time in 
half.  So either we just have too many GPOs or a couple of them for whatever 
reason is crushing the logon.


Is it more efficient to have 200 GPOs that set 1 item in each one?
OR
Is it more efficient to have 1 GPO that sets 200 items?
OR
Does it not make any difference in how long it takes to process?

Thanks all.

***************************************
John C. Kelsey
Penn Highlands DuBois
•:  814.375.3073
•  :   814.375.4005
•:   [email protected]<mailto:[email protected]>
***************************************
[PHH ESig Logo 150dpi]


This email and any attached files are sensitive in nature and intended solely 
for the intended recipient(s). If you are not the named recipient you should 
not read, distribute, copy or alter this email. Any views or opinions expressed 
in this email are those of the author and do not represent those of Penn 
Highlands Healthcare or its affiliates.. Warning: Although precautions have 
been taken to make sure no viruses are present in this email, the company 
cannot accept responsibility for any loss or damage that arise from the use of 
this email or attachments.

Reply via email to