Too much Time until logon window after applying Security Configuration Wizard on DC

Question

Hi,
The scenario is the following:
Domain Controller on Windows 2012 R2
DHCP installed on Domain Controller
Clients: Win7, Win8
Servers: Win2008/R2, Win2012 R2
After applying a SCW template on a DC, the logon window takes too much time to appear (after reboot, lock or sign out).
The seetings in the template are the following:
Select Server Roles: All of the default options selected by SCW
Select Client Features: All of the default options selected by SCW
Select Administration and Other Options: All of the default options selected by SCW
Select Additional Services: All of the default options selected by SCW
Handling Unspecified Services: Do not change the startup mode of the service
Network Security Roles: All of the default options selected by SCW
Require SMB Security Features: 2 checkboxes marked
Require LDAP Signing: the checkbox marked
Outbound Authentication Methods: Domain Accounts
Outbound Authentication using Domain Accounts: 2 checkboxes marked
Inbound Authentication Methods: none of the checkboxes marked
System Audit Policy: Audit successful activities
The question is:
What options(s) include/exclude from SCW template that avoid too much time logon windows takes to appear?
Thanks in advance!

Answer 1

Hi,
Based on my research, SCW helps administrators to ensure that only those services, application capabilities, and ports required for the roles to function are available; anything not specifically needed by the roles the server holds will be disabled. These
tasks above all consume time to implement, which causes the delay for the Windows logon screen to display.
Therefore, as the way I see it, it is a normal behavior, and I didn’t find any option which could avoid/reduce time spent on applying settings within the SCW template.
More information for you:
The Security Configuration Wizard
https://technet.microsoft.com/en-us/magazine/2007.04.securitywatch.aspx
Security Configuration Wizard
https://technet.microsoft.com/en-us/library/cc754997.aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]