We have a single domain and users are all at one site. But we users from time to time complain about slow logon. DNS and AD checks all return ok with dcdiag. Server performance is also fine. Users have roaming profiles but most of the folders are redirected - MY documents, Desktop, App Data, My Pictures, Downloads, etc. So their profiles are small.
I enabled the Userenv debug logging and attached are the results of this. From what I can see the computer is continuously processing the group policy items and not staling anywhere.
But I see events like below:
GPSVC(458.568) 16:05:11:343 Client_LockPolicySection: Machine critical section has been claimed. Handle = 0x17a050
GPSVC(458.568) 16:05:11:343 Client_LockPolicySection: Leaving successfully.
GPSVC(458.568) 16:05:11:343 Client_UnLockPolicySection: Starting UnLock Call
GPSVC(4f0.52c) 16:05:15:473 UnLockPolicySection called for user <Machine>
GPSVC(4f0.52c) 16:05:15:473 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(4f0.52c) 16:05:15:473 UnLocked successfully