Skip to main content
Solved

Is 90 seconds considered a good login time when using AD logins off network?

  • November 6, 2014
  • 6 replies
  • 5 views

Forum|alt.badge.img+10

Just curious what others experiences are! :)

Thanks!

Best answer by jhalvorson

Before deploying the following script, we were seeing logins taking 90 to 120 seconds.

Now that I've deployed the following setting via a script, it's about 30 to 45 seconds. The people are happy.

#!/bin/bash     

defaults write /Library/Preferences/com.apple.loginwindow DSBindTimeout -int 15

exit 0

I did a lot of trials with different time values and 15 seconds seemed to be the best. With our AD and current computers, and network structure, I was able to get the value down to 3 seconds without missing the AD validation while the computer was on a wired intranet connection. But the older computers needed more time.

To obtain the number that works for us, I used the information posted on 2/20/2013 by /url][/url">@achand][/url][/url here [https://jamfnation.jamfsoftware.com/discussion.html?id=6025

Mobile accounts, but not mobile network home shares.

6 replies

Forum|alt.badge.img+8
  • Contributor
  • November 6, 2014

Mine usually takes less than a minute. Guess i have never timed it but its pretty short when off the network.


Forum|alt.badge.img+8

@rcurran Are you using network home folders or mobile accounts? We're using mobile accounts on our lab computers and with our new 2013 iMacs (10.9.5 128GB SSD 3.3 GHz i3) login time is down to 12 seconds


Forum|alt.badge.img+5

same here we use mobile accounts.


bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • November 7, 2014

@Felipe.hernandez, ours are less than a minute.

But I have seen much longer logins. Not sure if the following helps you: https://macmule.com/2011/03/11/slow-login-for-ad-mobile-accounts-when-off-the-office-lan/


Forum|alt.badge.img+26
  • Honored Contributor
  • Answer
  • November 7, 2014

Before deploying the following script, we were seeing logins taking 90 to 120 seconds.

Now that I've deployed the following setting via a script, it's about 30 to 45 seconds. The people are happy.

#!/bin/bash     

defaults write /Library/Preferences/com.apple.loginwindow DSBindTimeout -int 15

exit 0

I did a lot of trials with different time values and 15 seconds seemed to be the best. With our AD and current computers, and network structure, I was able to get the value down to 3 seconds without missing the AD validation while the computer was on a wired intranet connection. But the older computers needed more time.

To obtain the number that works for us, I used the information posted on 2/20/2013 by /url][/url">@achand][/url][/url here [https://jamfnation.jamfsoftware.com/discussion.html?id=6025

Mobile accounts, but not mobile network home shares.


Forum|alt.badge.img+10
  • Author
  • Contributor
  • November 13, 2014

Thank you!! This seems to have made a significant difference! Thank you all for the other tips as well :)