Slow network logon for users

We have a single domain and users are all at one site. But we users from time to time complain about slow logon. DNS and AD checks all return ok with dcdiag. Server performance is also fine. Users have roaming profiles but most of the folders are redirected - MY documents, Desktop, App Data, My Pictures, Downloads, etc. So their profiles are small.

I enabled the Userenv debug logging and attached are the results of this. From what I can see the computer is continuously processing the group policy items and not staling anywhere.

But I see events like below:
GPSVC(458.568) 16:05:11:343 Client_LockPolicySection: Machine critical section has been claimed.  Handle = 0x17a050
GPSVC(458.568) 16:05:11:343 Client_LockPolicySection: Leaving successfully.
GPSVC(458.568) 16:05:11:343 Client_UnLockPolicySection: Starting UnLock Call


GPSVC(4f0.52c) 16:05:15:473 UnLockPolicySection called for user <Machine>
GPSVC(4f0.52c) 16:05:15:473 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(4f0.52c) 16:05:15:473 UnLocked successfully
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
Do you have a large number of user profiles on the slow machines. That can sometimes slow down log in to the server.

Also do a Disk Cleanup (Admin Tools) to remove temporary files. A build up of temp files slows down a computer as it searches through the temp files.
Larry Struckmeyer MVPCommented:
The time stamps on those are within thousands of a second so it would not seem that is the cause of long logins.  

You can test if GPO is the issue by moving one of the systems to a different OU, reboot and logon several times and see if the behavior changes.  If so, you could "un-enable" half of the GPOs and narrow the search by the 50-50 method.
Take a look at this link. It sounds like this rollup could fix your issue and potentially more. I would recommend trying it out in a test environment of course.
Angular Fundamentals

Learn the fundamentals of Angular 2, a JavaScript framework for developing dynamic single page applications.

IMHO, roaming profiles are the worst, along side wireless... When set up correctly and all hardware, software are identical then everything may work till something goes wrong and then its rebuild time again. Example is PST being redirected and for no reason stops working. Someone gets an PDF update and it messes up the rest. How large are the profiles?
I would take a few users and remove them from roaming and see how things work.
Hope I have helped.
curious7Author Commented:
Thanks all for the help. I found that the file server had the CPU wait time going above 20 % due to contention on the Vmware host. After I move a few VMs to another host the performance is ok.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
curious7Author Commented:
Solution has resolved the situation
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Operating Systems

From novice to tech pro — start learning today.