Enforce GPO processing of a particular GPO

We have about 900 netbooks/laptops that process GPO's every morning when the user logs on, many of which cover drive mappings and folder redirections. One particularly stubborn one has been the Start Menu redirection for Windows 7. The redirected start menu contains all of their applications so it's fairly vital. Some netbooks, when it's really busy, seem to want to bypass this step. They'll load without the start menu. The menu is being pulled from an EVERYONE:READ permissioned directory running on a Windows Server 2008 (Dell Powervault DL2000) server with the File Services Role installed. This really seems to come down to a timeout issue with the network being so busy. Is there any way to force the netbook's particular gpo to wait until it is fully processed before continuing?

Thanks for any help!
LVL 8
Casey WeaverNetwork EngineerAsked:
Who is Participating?
 
Casey WeaverNetwork EngineerAuthor Commented:
After lots of testing, it's conclusive that breaking up the gpo's has solved the problem. The issue has not re-occured, and even with the increased amount of gpo's everything is working.

For extra data, it wasn't found to actually be an ordeal with wireless, bigger laptops worked fine. It was only netbooks, which seems to be related to their utterly pitiful load speeds compared to any other system.
0
 
strivoliCommented:
"Slow Network Detection" is a Policy that should help in your scenario. This Policy governs when a Network will be considered slow and as a result will not process some GPOs (I guess Start Menu Redirection is one of these GPOs) and rules the client (PC) if it should even consider Slow Networks at all.

I would give it a try.
0
 
Will SzymkowskiSenior Solution ArchitectCommented:
On the machines that are encountering this issue is it a particular machine or group of machines each time? What I would recommend is doing an RSOP on the machine in question and then look at the policy settings to verify if the policies are actually being applied.

I would also suggest looking at the event viewer as well to see if there are any policy processing issues listed.

Another question are all of the workstations Windows 7 mix environment with Windows XP?
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Casey WeaverNetwork EngineerAuthor Commented:
All 1,600 machines are Windows 7, there's nothing below Windows 7 or Windows Server 2008 on the network.

The machines are random, and frequently happens when the area comes under great strain, such as 60 netbooks hitting a Meru 320i AP. More than not enough signal strength (that's fine) it seems the netbooks themselves get connectivity issues when so many of them are crammed into one area. Throughput is fine, but some are taking longer than others to negotiate that first link up.
0
 
Will SzymkowskiSenior Solution ArchitectCommented:
If you are using Windows XP clients then you want to use the method above "Slow Network Detection" as this was turned off in windows xp so the users experience would be a faster logon. This should not be the issue in Windows 7 as this setting was once again enabled.
0
 
Will SzymkowskiSenior Solution ArchitectCommented:
As you have stated in your eariler post that when you have several users connecting to a wireless AP which is when the issues arise with group policy not processing, it seems to me that it is more of a network issue then a group policy issue.

Have you checked or done any tests with the wireless at the peak times when you are running into issues?

Also, can you try doing an rsop.msc on the machines in question. This will determine what policies have been applied and also the reason why they failed.
0
 
Casey WeaverNetwork EngineerAuthor Commented:
RSOP points to network timeout being the issue when affected. And that's the issue, the machine isn't waiting long enough. We can't make the network any faster, it's the fact their netbooks with crappy 2x2 antennas, as many as 120 of them in a 50x50 area. The AP's can keep up but the netbooks run over each other in terms of interference and take awhile to negotiate their channels. That's why we're trying to get them to wait so that the gpo has enough time to download and process.
0
 
LeeTutorretiredCommented:
I've requested that this question be deleted for the following reason:

The question has either no comments or not enough useful information to be called an "answer".
0
 
Casey WeaverNetwork EngineerAuthor Commented:
I have been gleaning alot of logs over the last two week to try to better understand the issue. In the end, it seems to be the previous admins gpo that is the cause of the issue. The single gpo seems to be far too large (approximately 90 changes). I've broken it down into a test group of about 17 different gpos to make it smaller and it seems to be taking every time. I'll have to watch a little more to see.

-Casey
0
 
Casey WeaverNetwork EngineerAuthor Commented:
I'll make sure to watch this better. Thanks!
0
 
Casey WeaverNetwork EngineerAuthor Commented:
My own finding ended up being the best ending. I have repped those that have given excellent diagnostic examples for these kinds of issues.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.