Logon Optimization

For computers running on Windows operation systems, the Fast Logon Optimization feature is set by default for both domain and workgroup members. This results in the asynchronous application of policy when the computer starts and when the user logs on. This application of policy is similar to a background refresh and can reduce the time it takes for the logon dialog box to display and the length of time it takes for the shell to be available to the user. Administrators can change the default by using the Group Policy Object Editor.

The following list describes conditions during which Fast Logon Optimization is disabled:

  • When a user logs on to a computer.
  • When a user has a roaming user profile or a home directory for logon purposes.
  • When a user has synchronous logon scripts.

Be aware that, under the listed conditions, a computer can start asynchronously. However, because logon is synchronous under these conditions, logon does not exhibit optimization.

Folder redirection and software installation policies.

Be aware that when logon optimization is on, a user may need to log on to a computer twice before folder redirection policy and software installation policy are applied. This is because application of these types of policies require the synchronous application of policy. During a policy refresh, which is asynchronous, the system sets a flag that indicates that the application of folder redirection or software installation policy is required. The flag forces synchronous application of policy when the user logs on.

The following list summarizes the default processing of policy on Windows.

Client Application at start/logon Application at refresh
Windows Vista Asynchronous Asynchronous
Windows Server 2008 Synchronous Asynchronous


Be aware that computers running on Windows Vista and later operating systems support Fast Logon Optimization in any domain environment.

To turn off Fast Logon Optimization, use the following policy setting:

"Computer Configuration \ Administrative Templates \ System \ Logon \ Always wait for the network at computer startup and logon"

For more information, see the following topics: