Computer takes a long time at "Applying Computer Settings"

Not sure what I should do in nslookup, but I did try this.

> name
Server:  lamarcadc.lamarcapc.com
Address:  10.0.0.5
 
*** lamarcadc.lamarcapc.com can't find name: Non-existent domain
> yahoo.com
Server:  lamarcadc.lamarcapc.com
Address:  10.0.0.5

                                              

1:
2:
3:
4:
5:
6:
7:
8:

Only the first box of TCP/IP DNS settings is checked - Register this connection's address in DNS. This isn't happening for everyone, and not every time on the affected computers. It seems unlikely that this default selection would cause the problem. Are you sure I should change it?

I'm not sure about the domain. When I join computers to do the domain, I just type "lamarcapc". If I need to rename a computer, I will usually have to unjoin and rejoin because it somehow picks up the .com suffix, and it won't work to rejoin then. My workstation reports belonging to the lamarcapc.com domain, but I always type "lamarcapc", not "lamarcapc.com" when joining. Does that sound right?

Can you ping lamarparc.local?
It won't do any harm to check both those boxes and fill the suffix in as the .local version if it's available

I tested this on my workstation. Filled in "local" (should I have used ".local" instead?) and checked both boxes. I can't "ping lamarcadc.local" (the DC). However, when I "ping lamarcadc" I get the following result.

C:\Documents and Settings\bnorthway>ping lamarcadc
 
Pinging lamarcadc.lamarcapc.com [10.0.0.5] with 32 bytes of data:
 
Reply from 10.0.0.5: bytes=32 time<1ms TTL=64

                                              

1:
2:
3:
4:
5:

Ok the DNS suffix needs to be lamarcapc.com it looks like your internal domain name has been given a .com

toucan check by looking in active directory users and computers at the top of the tree it will tell you the domain name.

When you run nslookup don't do anything I am interested to know if the first line says cannot find server?

Do you gave access to look at your DNS server?
If so check it gas a reverse lookup zone.

nslookup appears ok

C:\Documents and Settings\bnorthway>nslookup
Default Server:  lamarcadc.lamarcapc.com
Address:  10.0.0.5
 
>

                                              

1:
2:
3:
4:
5:

Is that after you made the change to the DNS suffix?

The top entry in AD users and computer is "lamarcapc.com"

I have full access to the DNS Server, and it has a reverse lookup zone.

that nslookup result is with the default options - nothing in the suffix, only the first checkbox selected.

Just by the looks of the ipconfig/all log we only see ethernet.  Are these 2 pc's only ethernet or do they have wireless NICS as well, laptops?  Did this just start happening?  Have you removed pc's from domain and rejoined them?

Both of these computers are only ethernet, although I have one user who said that his laptop sometimes takes a long time to log in at home. I guess I forgot about that one. I don't remember for sure if it joins his wireless network before login or not.

That laptop has been slow sometimes about since he got it, a couple of months. The others are more recent. Could a GPO software deployment cause this?

I have not rejoined the PCs, but how could that fix this? I can give it a try if you are sure it might work.

Are there any disk errors in event viewer?  Removing from domain and rejoining is quick and easy and is one of the first things I would do after checking event viewer.

I unjoined the desktop that has been causing the most trouble, rebooted several times, no pausing on 'Applying Computer Settings'.

Rejoined, and it paused again.

I have two errors in the System log

Event Type:    Error
Event Source:    Service Control Manager
Event Category:    None
Event ID:    7023
Date:        8/4/2009
Time:        8:22:11 AM
User:        N/A
Computer:    CW
Description:
The Human Interface Device Access service terminated with the following error:
The specified module could not be found.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type:    Error
Event Source:    Service Control Manager
Event Category:    None
Event ID:    7022
Date:        8/4/2009
Time:        8:22:46 AM
User:        N/A
Computer:    CW
Description:
The Windows Search service hung on starting.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

There is also an error in the Application log

The time difference on these is rather large. I looked at the clock when it was stuck at "applying computer settings" and it was 8:22. The attached event may have been from the previous reboot.

Event Type:    Error
Event Source:    Windows Search Service
Event Category:    Gatherer
Event ID:    3024
Date:        8/4/2009
Time:        8:15:33 AM
User:        N/A
Computer:    CW
Description:
The update cannot be started because the content sources cannot be accessed. Fix the errors and try the update again.
 
Context: Windows Application, SystemIndex Catalog
 
 
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:

I solved the Human Interface Device service error. The system was missing %windir%\system32\hidserv.dll

The Windows Search service error is very suspicious though.

I wouldn't think that would cause the problem you're having but have seen stranger.  What about if you go into device manager and uninstall the NIC and then have windows redetect/reinstall?  If that doesn't do anything then maybe disable all non microsoft services and all programs from starting up via msconfig.

Ok, I'm pretty sure I found the culprit. Check out this link: http://social.msdn.microsoft.com/forums/en-US/windowsdesktopsearchdevelopment/thread/3426669d-2c8f-4969-944c-8175c86a9601/

Now, it seems that changing this service to manual startup may cause other problems, or may be reverted by later Windows Updates. Any ideas?

I am not sure exactly how the WDS service works when "applying user settings" but what if you went into tools-->folder options-->view and then unselect "automatically search for network folder and printers".  I don't know if the 2 have anything to do with each other but it would be interesting to know if it makes any difference.  In any case it looks like you have a fix.