Ever wondered why the computers in your organisation are so slow? Well Darren Mar-Elia has just posted an extensive article on TechNet called Group Policy and Logon Impact. His blog goes into great detail explaining many of the pit fallâ€™s IT Admins can do that cause large impact to logon speed and group policy processing.
The summary tips of the actions are as follows:
- Avoid synchronous CSEs and donâ€™t force synchronous policy, or if CSE usage is necessary, minimize changes to these policies.
- Avoid costly WMI filters such as LDAP queries.
- Look for costly scripts by running them in isolation, and work to improve the scriptsâ€™ performance or avoid these scripts.
- Donâ€™t run ITL evaluations such as OU, LDAP Query, Domain, Site, or Computer Security Groups.
- If you need to use security group filters, consider this KB article.
- Donâ€™t use â€œReplaceâ€ with Group Policy Preferences Printers.
- Disable synchronous logins when on a slow link.
For full context on each of these actions I recommend you a full read of the article at: http://blogs.technet.com/b/grouppolicy/archive/2013/05/23/group-policy-and-logon-impact.aspx