If you have ever done any work with group policy you may notice that it sometimes takes two or three reboots of a client computer before some policies take effect. This is pretty commonly seen with software installation and folder redirection policies more than any other. This delay is caused by a “feature” of Windows XP called “Fast Logon Optimization”. This means that group policy is processed at the same time as when the processor is performing other tasks to get the computer booted up into a usable state.
The solution to this problem is disabling fast logon optimization with another GPO. You can find this setting under Computer Configuration\Administrative Templates\System\Logon. Here, you can enable “Always wait for the network at computer startup and logon”. This could potentially increase the time it takes for your computers to log on, but it will also ensure that group policy gets its chance to be applied.
***
Chris Sanders is the network administrator for one of the largest public school systems in the state of Kentucky. Chris’s specialties include general network administration, windows server 2003, wireless networking, and security. You can view Chris’ personal website at www.chrissanders.org.
