Do you have ICMP disabled on your border routers? Group Policy Objects use the Internet Control Message Protocol (ICMP) to detect slow network links. Group Policy uses ICMP to detect slow network links. The remote-site workstations are having difficulties logging in because the GPO is attempting to transmit all GPO settings over the slow link rather than withholding scripts, Software Installation and Folder Redirection settings as is the default behavior over slow links. If your network configuration involves any hardware or software-based firewall solutions, you will need to enable ICMP packets between your controllers and clients.
Related Q&A from Laura E. Hunter
Active Directory expert Laura E. Hunter offers some advice for changing the IP addresses of domain controllers.continue reading
A Windows administrator moving from Windows Server 2003 to Windows Server 2003 R2 wants to perform a restore of a previous server to a new one ...continue reading
An admin has two domains and two Active Directories. He wants to know how to join the Active Directories so that internal staff can access both, but ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.