GPO is taking too long to apply

Daniel Lima 1 Reputation point
2023-03-20T11:14:17.0266667+00:00

Good morning guys,

I have an environment with Windows Server 2019, 3 domain controllers.

It happens that when users log on, the network mapping, shortcuts, wallpaper do not appear, requiring a logoff and logon.

I checked the GPO configuration and it's in sync, so it's also configured to wait for the network to boot.

I checked with Dell's Switch team, port settings are port-fast, and spanning three

All my park is Windows 10 22H2.

Does anyone know what could be going on?

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,740 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Limitless Technology 43,931 Reputation points
    2023-03-21T15:56:11.76+00:00

    Hello

    Thank you for your question and reaching out. I can understand you are having query\issues related to Slow GPO applying.

    1. Open Event viewer -> Go to Applications and Services Logs –> Microsoft -> Windows -> Applications and Services Logs -> Group Policy -> Operational -> Check events with the IDs 4016 and 5016 show the time when the processing of GPO application extensions starts and ends.
    2. Avoid costly WMI filters such as LDAP queries and Disable any long running startup scripts and The installation of software deployed through GPO.
    3. Verify DNS settings on client computers and it should be pointed to your DCs IP.
    4. Verify Date and time should be sync with your AD DC.

    --If the reply is helpful, please Upvote and Accept as answer--

    1 person found this answer helpful.
    0 comments No comments

  2. Daniel Lima 6 Reputation points
    2023-03-21T16:04:18.4633333+00:00

    I checked all the alternatives informed to solve the problem, but I still have the problem

    1 person found this answer helpful.
    0 comments No comments

  3. Adam J. Marshall 8,621 Reputation points MVP
    2023-03-22T00:38:19.39+00:00

    It is always DNS - the famous saying. :)

    Check out my guide - ensure your DC's are setup properly. If you have to make adjustments, wait 24 hours before seeing if the issues are still existing or not.

    https://www.ajtek.ca/guides/domain-controller-dns-in-an-active-directory-environment/

    1 person found this answer helpful.
    0 comments No comments