question

brajkishorSingh-1326 avatar image
0 Votes"
brajkishorSingh-1326 asked Douglas-6665 edited

Drive Mapping GPO causing slow profile load on citrix VDI machines

Hi Guys,
Please help we are having some issue related to GPO slowness. As per finding one of the drive mapping causing the slow profile loading issue on citrix VDI machines & same GPO is working fine with laptop/desktop user.Once we will deny drive mapping GPO of few user everything works as expected .But we do not have root cause why this is happing only for citrix VDI machine

Drive mapping policy is coming from parent OU & its user base policy & we have apply one Loopback policy for citrix VDI
Can anyone advise how to find exact slowness cause of drive mapping policy

regards

windows-active-directorywindows-group-policy
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

is it any possibility to check individual GPO processing time & which GPO it causing the issue

0 Votes 0 ·
VickyWang-MFST avatar image
0 Votes"
VickyWang-MFST answered brajkishorSingh-1326 commented

The following is a list of Group Policy Settings recommended by Microsoft to lockdown a Remote Desktop Session Host / Citrix Session. These settings should go in the Citrix VDA Non-Admin Users GPO. All settings are located at User Configuration > Policies.
109301-image.png


reference:https://www.carlstalhood.com/group-policy-objects-vda-user-settings/

Hope this information can help you

Best wishes

Vicky


image.png (117.3 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for your kind response

Just to inform you we already have configured citrix side exclusion in policy ,as per the investigation we found issue with one of the drive mapping policy on citrix Vda & this policy is working fine on laptop/desktop users.Once we will exclude the user from drive mapping policy all working fine.Now the question is that is there any way to check what exactly causing the issue for the drive mapping policy specific .

Do we have any MS tool to review the GPO logs or please let me know if any suggestion

Regards

0 Votes 0 ·
VickyWang-MFST avatar image
0 Votes"
VickyWang-MFST answered

Overview of Group Policy Client Service (GPSVC)

One of the major changes that came with Windows Vista and later operating systems is the new Group Policy Client service. Earlier operating systems used the WinLogon service to apply Group Policy. However, the new Group Policy Client service improves the overall stability of the Group Policy infrastructure and the operating system by isolating it from the WinLogon process.
The service is responsible for applying settings configured by administrators to computers and users through the Group Policy component. If the service is stopped or disabled, the settings will not be applied, so applications and components will not be manageable through Group Policy. Please keep in mind that, to increased security, users cannot start or stop the Group Policy Client service. In the Services snap-in, the options to start, stop, pause, and resume the Group Policy client are unavailable.
Finally, any components or applications that depend on the Group Policy component will not be functional if the service is stopped or disabled.
reference:https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/a-treatise-on-group-policy-troubleshooting-8211-now-with-gpsvc/ba-p/400304
Hope this information can help you

Best wishes

Vicky

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VickyWang-MFST avatar image
0 Votes"
VickyWang-MFST answered

Hi,

Welcome to share your current situation if there are any updates.

Please feel free to let us know if you need further assistance.


Best Regards,
Vicky

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VickyWang-MFST avatar image
0 Votes"
VickyWang-MFST answered

Hi,

Welcome to share your current situation if there are any updates.

Please feel free to let us know if you need further assistance.


Best Regards,
Vicky

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Douglas-6665 avatar image
0 Votes"
Douglas-6665 answered Douglas-6665 edited

Hi, I have recently been facing a similar issue.

It is possible to audit the culprit GPO using Director (providing you have Windows VDA version 1903 or late installed) :
Search for the user and click on the left "details" button, you should get a breakdown of the last logon duration.
196609-2022-04-26-18-36-14-director.jpg

if you hover over the GPOs section you can select a detailed drilldown of said GPOs :

196691-2022-04-26-18-36-45-director2.jpg

You should find your culprit.

In my case the problem was on the driver side of the print spooler. I reinstalled PCL6 latest drivers and that resolved the slow logons.

Hope it helps !






5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.