During windows logon process, what is the sequence for Profile Load and GPO?

0

According to this article: https://blogs.technet.microsoft.com/markrenoden/2015/07/28/windows-enterprise-client-boot-and-logon-optimization-part-13-boot-phase-winlogon/, User Profile loads after Group policy is applied.

However, when I look at event logs in User Profile Service and Group Profile Service, User Profile load seems to be happening before GPO. Could anyone have more insights on this and explain which one is exactly happening before.

Akshat

Posted 2018-03-19T06:24:51.643

Reputation: 21

+1 on the question, as it is a good question. Those who voted it down, apparently don't know the answer, and assume incorrectly. – LPChip – 2018-03-19T08:09:28.510

Answers

0

Prior to windows 10, it used to be the case that Group Policy was applied first.

Since Windows 10, this has changed to accompany the Fast Startup routine.

In Windows 8, where Fast Startup is also happening, Group Policy would still load first before the user logs in, which was considered a slow down factor, but in windows 10, this has changed.

Do note, your link is from 2015, from before Windows 10

The user is logged in as quickly as possible, and it takes up to between 1 and 5 minutes before the Group Policy is silently applied in the background.

This brings its own set of problems though. For example, if you have network shares, and group policy creates them and you have software that relies on them, network shares may show up as disconnected while they really aren't. In addition, if you make a change that requires the startup script, computers may need to reboot twice before the change is in effect due to the group policy not being applied before user login. So basically, you make a change, user logs in, nothing happens, group policy is refreshed, but its too late for the startup script to work, another reboot, and now the login script is applied.

LPChip

Posted 2018-03-19T06:24:51.643

Reputation: 42 190

Thanks for your answer. However, even in Windows 7, I see Profile Load happening first in the event logs. Am I missing something here? Also, any idea about changes in Server OS? – Akshat – 2018-03-20T14:33:05.430

To my knowledge, loading the GPO is part of loading the userprofile. The reason it loads the profile first, is because the profile contains which GPO it needs to load, so the eventlog would reflect that. But the GPO is applied before the profile loading is fully done. The same change is also present in Windows Server 2016, but not Windows Server 2012. – LPChip – 2018-03-20T15:59:22.907