For beginner guidelines for troubleshooting slow login issues, see TID 7007583.
For more information on configuration of recommended antivirus exclusions that can reduce login times, see TID 7007545.
Perform a routine health check on all of the authentication servers and user sources, because any non-functional server that is configured in the Closest Server rules might add to login time delays.
Verify that the ZENworks Configuration Management Primary Servers and the configured user sources can communicate properly.
Verify that all the replicas of user sources associated with a given authentication server (Primary or Satellite) are functional and working properly.
Verify that the replicas or user sources associated with all of the authentication servers in the Closest Server rules are reachable. Non-functional user sources can cause delays in login times.
When you configure connections for a Primary or authentication Satellite Server, use only those user sources or replicas that are easy to reach.
Configure the list of connections for every authentication server, in the order of how easy it is to reach them.
Wherever possible, configure local authentication satellites and local directory servers or their replicas for authentication purposes.
Configure the Default location with only one authentication server if possible.
Ensure that time is synchronized for servers, satellites, managed devices, databases, and directory servers.For more information, see Section D.9.2, Time Synchronization.
Ensure that DNS resolution is working across Primary Servers, Satellites, managed devices, and user sources.
Ensure that the external (2645) and internal (443) CASA services are functional.
Ensure that the certificates are valid and have not expired. For more information, see Section D.9.3, Checking Certificates.
Where possible, avoid configuring multiple Group policies with multiple settings. For details, see Section D.6.1, Group Policy.
Group policies with security settings enabled might cause delays to login times. You should use a combination of bundles and Windows secedit (security configuration editor) to achieve the desired results.
Do not set multiple bundles to be launched at login. Use On Device Refresh or other appropriate schedules to reduce the user login times.For more information, see Section D.7, ZENworks Configuration Management Bundles.
Do not assign multiple bundles with multiple system requirements to be triggered at user login.For details, see Section D.7, ZENworks Configuration Management Bundles.
Enable Random Refresh in the Management Zone and configure the time window according to your users’ needs. Setting the time window to be too small might impact login times.
When there are multiple user sources configured in the Management Zone, configure a default realm to improve boot login times.
Do not use a combination of Default Realm and Seamless Login registry settings.
Configure NALWIN in the Run section of the registry (HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run) instead of launching it as a bundle in a user login event HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run.
Configure NALWIN in the SHELL registry key instead of Explorer for cases where NAL is required but Explorer is not required.The registry key is located at
/HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Disable NALVIEW if the NAL icons do not need to be displayed on the desktop, Quick Launch, startup menu or notification area.For more information, see Section D.5.1, Using Registry Keys to Reduce Login Time.
Set the registry key to enable asynchronous device refresh during user login. For details, see Section D.5.1, Using Registry Keys to Reduce Login Time.
Enable login status messages on the managed device (10.3.x) to view the complete login sequence.
Enable batch refresh on terminal servers to improve the user login times when users log in simultaneously to access terminal server sessions. Create a Dword type registry key named EnableBatchRefresh and set the value to 1 at HKLM\Software\Novell\ZCM\.