We have an Active Directory domain with 2 Domain Controllers (DC1 and DC2) running on Windows Server 2008 R2 SP1 and approximately 200 Windows XP SP3 computers (Mix of Desktops and Laptops). We have been having issues with long login times (Typically 3-5 Minutes) while logging into the domain.
When you type in your username and password to login to the domain and press OK, the login box stays up for approximately 15-20 seconds before switching to "Applying Settings" where it sits for approximately 1.5-2 minutes, then to "Applying Personal Settings" for another 30 seconds - 1 minute. Then another 30 seconds - 1 minute or so before the background and icons show up.
We are distributing policies from the Domain Controller via Group Policy for drive mappings, printers, and folder redirection, as well as some other misc settings.
I did some searching before posting this and have already checked the suggestion to make sure that the XP workstation's DNS is pointing to the local DC and not my ISP (It was already configured this way), and the DNS server is pointing to itself for DNS (as recommended).
I have also tried the suggestion to Enable the group policy for the synchronous network login, that did not help.
I have also run gpresult /z on the computer (But I dont really know what that is supposed to be telling me other than the policies in effect on the system)
For a little more information .... When booting the system if I wait 15-20 minutes before logging in, the computer logs in significantly faster but still not as fast as it should and once I am logged in, if I log off and then login again the computer will login within 20 seconds.