Advanced Group Policy Management (AGPM) takes more than 60 seconds to load Group Policy object (GPO)

This article has been archived. It is offered "as is" and will no longer be updated.
Consider the following scenario:
  • You are using a Windows Vista or Windows Server 2008-based computer that is part of a domain that has no Internet access and no cached Certificate Revocation List (CRL).
  • You are using the Advanced Group Policy Management (AGPM) 3.0 client component.
  • If you are running GPMC.msc, and you select Change Control, it takes a while to load a Group Policy object (GPO) that is managed by AGPM and that depends on the network configuration. For example, it may take 60 seconds or even longer to load the GPO.
This problem occurs because the Authenticode signature verification process (CRL retrieval) on the AGPM .NET component is for the client-side only.
To work around this problem, create an Mmc.exe.config that has the following value:
<?xml version="1.0" encoding="UTF-8" ?><configuration>    <runtime>            <generatePublisherEvidence enabled="false"/>    </runtime></configuration>
Then, add this file to the C:\Windows\System32 folder.

Article ID: 973072 - Last Review: 01/16/2015 04:01:42 - Revision: 1.0

Windows Server 2008 for Itanium-Based Systems, Windows Server 2008 Datacenter, Windows Server 2008 Enterprise, Windows Server 2008 Standard, Windows Vista Business, Windows Vista Enterprise, Windows Vista Home Basic, Windows Vista Home Premium, Windows Vista Ultimate

  • kbnosurvey kbarchive kbtshoot kbexpertiseinter kbsurveynew kbprb KB973072