troubleshooting Question

Group Policy +WMI Filter Causing LONG!!! Boot times

Avatar of mcburn13
mcburn13Flag for United States of America asked on
Windows 7Windows Server 2008Windows Server 2012
8 Comments1 Solution1027 ViewsLast Modified:
Started having workstations with a MAJOR lag in booting.   After seeing 6005/6006 Event IDs I applied a policy that enabled verbose GP Logging.  After gathering a good amount of logs from affected machines, I started using Policy Reporter to view these logs and it became clear the time lag in processing began on a certain policy.  Also saw that it happened when it got to the WMI filter.  We had the same thing about the same time on a totally different forest, but on a policy that also has a windows 7 WMI filter.  I removed it but we have other policies with WMI filters now the logs are showing them with these huge gaps in time after they start processing it... Based on the fact it is two separate forests with different policies etc. I am tending to thing there may have been a Windows update (or possibly another pushed out package) that is to blame- I have also seen some 5602 WMI event IDs and messages saying that it is restoring the WMI repository from a backup file.
MachineLog2.png
ASKER CERTIFIED SOLUTION
mcburn13

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 8 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 8 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros