Getting slow logons over a minute (1min6 secs) on a new server 2022 image using Fslogix as the profile solution it hangs on please wait for the user profile service / preparing windows. It does the same thing when logging in on the console as the local admin without a fslogix profile. When analysing the logon it seems to be the userinit/shell phase with the longest duration. I have made sure all the stub paths are removed in activesetup keys and run/runonce keys are empty in both HKLM/HKCU. I dont see any invalid drive mappings or logging scripts causing any issues and Citrix optmizer has been run and I have all the standard GPO settings set for user profiles such as "max wait for the network if a user has a roaming user profile or a remote home directory" set to 0 and "do not check for ownership of roaming profile folders". I checked all the processing times of GPO's and Ivanti UWM enviroment manager actions and these are all low. Without cracking out procmon and capturing a user logon not sure what else i could try ? has anyone else had any issues with server 2022 and long userinit/shell phase ?

New profiles, or existing profiles. How do you have your profiles configured? Office only, Profile only, both.

does same with the local administrator account and a newly created local account which is added to local administrators. Both Fslogix profile / ODFC is configured but the Exclude Fslogix profile/ODFC groups includes BUILTIN\Administrators so they are excluded

I would peel the onion ;)

If you exclude FSLogix and it still happens you will want to procmon and maybe even enable winlogon.log debug files.

Are all these profiles using Ivanti? I've seen hugely complicated Ivanti processing routines essentially delay the logon for ages in some cases

yeah its using ivanti EM i did try it with the Ivanti User virtualization manager service stopped and disabled and it made no difference still got stuck on please wait for user profile service / preparing windows

Do you have Tanium running on the machine? We saw 25+ seconds impact on logon time on our side. When service is disabled, it's better.

I once famously described Tanium as the "Fred West of VDI"

No tanium in this enviroment took a quick look at proc mon and noticed these

Tf are those

lol yeah no idea currently using my googling skills

Drivers and file type associations?

yeah looks like a driver metadata cache

Don't forget to let us know

just tested now it was deff the file assoication confg file policy

Is it humungous?

Not really that big tbh it was created on a server 2016 image which may well be the problem seeing as the new image is server 2022 with same apps/config (I wanted to create all new GPO's / Profiles but they insisted on using same profiles / same GPO's )

If you set the FTAs using something else (SetUserFTA, script, Reg import, whatever) do you get the same delay?

i used to use SetuserFTA all the time in other enviroments but it looks like you got to pay for it now 😞 you ever used Ivanti EM to set the file associations ? might give that a try

Yeah Ivanti works fine IME

think i cracked it after running dism /online /Export-DefaultAppAssociationsc\fileassoc\fileassoc.xml it exports the file associations to a xml file i then use dism /online /Import-DefaultAppAssociationsc\fileassoc\fileassoc.xml to import this seems to overwrite the existing oemdefaultassociations.xml in c:\windows\system32\. I then created a new blank xml file and added entries and then used "set a default assoications config file" to point to it and it seems to be working. Issue seems to be the GPO doesnt seem to like being pointed at the default associations file created by dism

Ohbrichtt

notice how the new file i created manually hasnt got the defaultassociations /defaultassociations switches

Interesting, does it actually cause a delay if you use the one with the offending switches?

yeah when exporting it out with dism it has those switches <defaultassociations> </defaultassociations> in between the entries as soon as i point the gpo at that xml file it hangs up at the please wait for user profile service. I point it at the custom xml file i created without those switches it goes straight in

Good to know