@Leila Kong
Thanks for your hints.
I don't recall that the problem occurs if I power down the system. Only return from hibernation is affected.
The RDP log lists the following events; so everything is fine according to RDP
Event 261: Listener RDP-Tcp received a connection
Event 1149: Remote Desktop Services: User authentication succeeded: ...
The application log shows the folloging warnings and errors:
Event 17: Security Center failed to validate caller with error DC040780.
Event 0: The description for Event ID 0 from source openvpnserv cannot be found.
Event 6005: The winlogon notification subscriber <GPClient> is taking long time to handle the notification event (CreateSession).
Event 6006: The winlogon notification subscriber <GPClient> took 64 second(s) to handle the notification event (CreateSession).
Event 6006: The winlogon notification subscriber <GPClient> took 491 second(s) to handle the notification event (CreateSession).
So your recommendation - check RDP log, then user profile log - was helpful.
I forgot to mention one specific circumstance that triggers the misbehavior:
On some weekends, I literally take "work" (i.e. my Intel-NUC) back home.
At work, the NUC is directly attached via LAN cable; at home it is connected via WiFi and OpenVPN.
The problem arises when I put it to hibernation at home and wake it up at work.
I found reports of GPClient
randomly stalling the logon process for several minutes back in 2014.
Apparently that's undefined behavior that has never been fixed.
According to https://community.spiceworks.com/topic/324801-winlogon-notification-subscriber-gpclient-error-taking-605-seconds-to-boot, GPClient
presumably tries to fix an allegedly corrupted WBEM repository
But that doesn't make sense because why is TeamViewer still able to open a login screen within a second and allow me to login without delay? If the WBEM repository was corrupted at that point, it still would require repair - right?