Windows 10 slow logon / Authentification

Question

Hello everyone,

For several months (June 2022) we have been experiencing random login/authentication problems when logging in or when changing network/vlan.

In general, the session opens (local profile, no roaming profile), the pc takes well an IP from the dhcp, but the user is really authenticated on the network (sharing, intranet access, etc...) only after 15/20 minutes. The problem affects Windows 10 and Windows 11 pcs

The context is quite simple a forest, 1 single domain, multi sites (1 AD 2016 per site), the pcs are hybrid azure in dhcp.

We analyzed the ad/dns, nothing in the dcdiag, replication ok , nor in the event log, RAS in the dhcp, no error message in the pcs event log.

The only anomaly found was a problem with the approval relationship. After opening the local session, the "Test-ComputerSecureChannel" command returns False

A "-Repair" allows to restore the connection immediately, but does not solve the problem. Exiting and re-entering a PC in the domain does not solve the problem either.

We are looking for a solution, we have already called several providers without any result and no solution has been found.

Answer 1

After troubleshooting long login for a server 2019 that was not internet connected, but domain joined, I found that the machine had been Azure Hyrid joined before it had been moved to the isolated vlan that does not have internet access, this was causing 8 minute login times. The solution was removing the machine from Azure AD Joined status using the following two commands:

Verify:
dsregcmd.exe /status

Leave:
dsregcmd.exe /leave

After the long removal process (It's probably timing out trying to contact Microsoft Azure AD / Microsoft Entra) the machine logs in and logs out almost immediately. For those chasing long login times, I hope this helps,

-John.

Answer 2

Hello

Thank you for your question and reaching out. I can understand you are having query\issues related to Windows 10 slow logon.

1. Please make sure you check the DNS on the Azure VNET whether name resolution is not taking longer.
2. Disable any Antivirus program or Windows firewall you may have for temporary purpose.
3. Please refer on below troubleshooting guide : https://learn.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-hybrid-join-windows-current

--If the reply is helpful, please Upvote and Accept as answer--

Answer 3

Hello,

Thank you for your feedback. To pick up on your lead

1- we have no settings on Azure VNET

2- we have already done this test without any result

3- we have also already followed the troubleshooting guide and we have not seen any problems with the hybridization.

Answer 4

Hi,

No one has any other ideas? we've called in several service providers and no one can find a solution to our problem, which is becoming very annoying.