This article has been archived. It is offered "as is" and will no longer be updated.
Consider the following scenario:
You are using a Windows Vista or Windows Server 2008-based computer that is part of a domain that has no Internet access and no cached Certificate Revocation List (CRL).
You are using the Advanced Group Policy Management (AGPM) 3.0 client component.
If you are running GPMC.msc, and you select Change Control, it takes a while to load a Group Policy object (GPO) that is managed by AGPM and that depends on the network configuration. For example, it may take 60 seconds or even longer to load the GPO.
This problem occurs because the Authenticode signature verification process (CRL retrieval) on the AGPM .NET component is for the client-side only.
To work around this problem, create an Mmc.exe.config that has the following value: