Problem with GPO / GPP (drive mapping) when L2 authentication is in place

We have problem with Drive Mapping (Group Policy Preference, Item level targetting). Drives are not mapped to users after restart of computer.
Tests proved:
- this problem occurs only on ports where L2 authentication (computer certificate) is enabled
- if user login immediately (if there is 10+s delay with logon then disks are mapped properly)
- from GPO logs (compared logs with and without L2auth) is obvious that when computer is connected to switch with L2 auth then, due to delays, user's GPO is applied BEFORE computer GPO ... this I do not understand at all

If mapped drives are set to Update ... they are in disconnected state after restart (red X) ... but after 20-30s it is possible to see the content (but red X remain)
If mapped drives are set to Replace ... they are not visible after restart

... if user does Logoff/Logon disks are properly mapped

Settings of drive mapping (example of user policy):
Action: Update
Location: DFS folder
Reconnect: Enable
Use first Available: Disabled
Run in logged on user's security context: Yes
Item level targetting: Security Group

(Computer policy)
Always wait for the network at computer startup and logon: Enabled

Here is description of our environment:
DC: W2k8 R2
Clients: Windows 7 x86
L2 Auth: Computer Authentication, MS Supplicant set in computer policy

Any idea how to solve this issue??? And how user's GPO could be applied before computer GPO??

Thank you.

Who is Participating?
Raj-GTConnect With a Mentor Systems EngineerCommented:
I've seen this before in one of my environments. Can you test again with the following policy settings enabled and report back.

Computer Configuration > Administrative Templates > System > Group Policy

Startup policy processing wait time Enabled  
Amount of time to wait (in seconds): 30
Logica01Author Commented:
Thank you. Startup policy was the one :).
Default value of Amount of time to wait is 30s.
When I increased it to 150s the problem was solved.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.