AD user takes forever to sign in to AD computer and reboot

Question

Dear Experts,

I have lenovo L380 L390 that were deployed with Windows 11, and everything works just fine if we used a local admin account, these are AD computers but if we used the domain user account trying to sign in, it takes a very long time like 20-30 minutes to generate the user profile folders and get into the user desktop, this can't be tolerated and moreover, when we tried to restart the computer from a domain user desktop, it takes forever to restart, what can be the cause and how to fix it?

Answer 1

Hello Eaven HUANG,

Thank you for posting in Q&A forum.

The issue you're experiencing with long sign-in times and restart delays for domain users on Lenovo L380 and L390 laptops running Windows 11 could be caused by several factors.

Here are some potential causes and solutions:

1.Slow Network Connection to Domain Controller:

Ensure that the computers have a stable and fast connection to the domain controller (DC). Slow or unreliable network connections can delay the authentication and profile loading processes.

2.Group Policy Processing:

If there are many or complex Group Policies being applied, this can significantly slow down the login process.

Please check if Computer Configuration → Administrative Templates → System → Logon “Always Wait for the Network at Computer Startup and Logon” to “Enabled” or "Disabled".

If it is enabled, you can try to disable it to see if it helps.

3.Roaming Profiles and Folder Redirection:

Roaming profiles can lead to long login times if the profile size is large. Similarly, folder redirection issues can cause delays. Ensure that the roaming profile path and folder redirection targets are accessible and performant.

4.User Profile Service Issues:

The User Profile Service on the client machine might be experiencing issues. Check the Event Viewer for any errors or warnings related to the User Profile Service and address them accordingly. Look under Application and Services Logs -> Microsoft -> Windows -> User Profile Service.

5.Antivirus/Endpoint Security Software:

Sometimes, antivirus or endpoint security software can delay the login process by scanning files that are being loaded. Verify that the antivirus software is not overly aggressive in scanning user profile data. Check the antivirus logs for any indications of delays.

6.DNS Configuration:

Proper DNS configuration is crucial for domain-joined machines. Ensure that the DNS settings point to the domain controller's DNS server.

7.Compare the settings or group policy between working domain machine and non-working domain machine.
Compare the settings or group policy between working domain user and non-working domain user.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.