Advanced Group Policy Management (AGPM) takes more than 60 seconds to load Group Policy object (GPO)

Article translations Article translations
Article ID: 973072 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • You are using a Windows Vista or Windows Server 2008-based computer that is part of a domain that has no Internet access and no cached Certificate Revocation List (CRL).
  • You are using the Advanced Group Policy Management (AGPM) 3.0 client component.
  • If you are running GPMC.msc, and you select Change Control, it takes a while to load a Group Policy object (GPO) that is managed by AGPM and that depends on the network configuration. For example, it may take 60 seconds or even longer to load the GPO.

CAUSE

This problem occurs because the Authenticode signature verification process (CRL retrieval) on the AGPM .NET component is for the client-side only.

WORKAROUND

To work around this problem, create an Mmc.exe.config that has the following value:
<?xml version="1.0" encoding="UTF-8" ?>
<configuration>
    <runtime>
            <generatePublisherEvidence enabled="false"/>
    </runtime>
</configuration>
Then, add this file to the C:\Windows\System32 folder.

Properties

Article ID: 973072 - Last Review: July 9, 2009 - Revision: 1.0
APPLIES TO
  • Windows Server 2008 for Itanium-Based Systems
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
  • Windows Vista Business
  • Windows Vista Enterprise
  • Windows Vista Home Basic
  • Windows Vista Home Premium
  • Windows Vista Ultimate
Keywords: 
kbtshoot kbexpertiseinter kbsurveynew kbprb KB973072

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com