asked on

Computer hangs when applying security policy

Hi, 95-97% of my company's w2k pro hangs when applying security policy between 10-45mins. daily and some troubleshooting, i found out that the computer always hangs after reading the workstation policy, in this workstation policy we defined the Max. size of the application,security and system log files, and some Internet Explorer settings too. We disable the: Disable showing the splash screen, Disable software update shell notifications on program launch, Disable Perodic check for Internet Explorer software updates and Disable Automatic Install of Internet Explorer components, under Local Policy Audit Policy we are auditing: Audit account logon events (Success, Failure) Audit logon events (Sucess, Failure) and Audit system events (Success, Failure) all through Active Directory... I deactived the Audit and the Event log size area but no inprovemens...Somebody should please help we have about 600 workstation and the waiting time is really a lot ! ! !!

Thanks

jvuz

Have you already checked for virii, spyware, adware?

Rob Stone

Whats the general performance of the network like?

You may have to do the process of eliminiation and disable one policy at a time until you find the one(s) that are causing the bottleneck.

Falco Bethke

did it occur suddenly?

agbor1960

ASKER

What is virii, spyware and adware.

and the general performance of the network is very good and when we took the whole policy out the workstation went back to normal..

Franka the started having this problem about 3-4 months ago..

Thanks a lot for your quick response

ASKER CERTIFIED SOLUTION

jvuz

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

agbor1960

ASKER

I have found out the problem for our workstation ..;-)...The problem was that every time the computer is started and every time the domain replicates, the local workstation always generate a GPT in the local workstation (c:\%systemroot%\security\templates\policies) and if a computer needs 5mins. to startup then this computer has about 400 of the same GPT, because the workstation are not able to connect to the Domain somehow to get the right policy that we defined on the OU level, though they get the right policy after logon the users i mean......still wondering why it happened....and these policy was about : Audit account logon events (Success, Failure) Audit logon events (Sucess, Failure) and Audit system events (Success, Failure) all through Active Directory...So what i did was to delete the hidden policies folder which should contain only two files (gpt00000 and tmpgptfl) and when the workstation startsup or when i restart the workstation the system i guess creates a new policies folder with the right path and two test files that it needs to get the right policy.....Thanks to all of you who tried to help with your comments and efforts....

cheers for now ! ! !