Is 90 seconds considered a good login time when using AD logins off network?

rcurran
Contributor

Just curious what others experiences are! :)

Thanks!

1 ACCEPTED SOLUTION

jhalvorson
Valued Contributor

Before deploying the following script, we were seeing logins taking 90 to 120 seconds.

Now that I've deployed the following setting via a script, it's about 30 to 45 seconds. The people are happy.

#!/bin/bash     

defaults write /Library/Preferences/com.apple.loginwindow DSBindTimeout -int 15

exit 0

I did a lot of trials with different time values and 15 seconds seemed to be the best. With our AD and current computers, and network structure, I was able to get the value down to 3 seconds without missing the AD validation while the computer was on a wired intranet connection. But the older computers needed more time.

To obtain the number that works for us, I used the information posted on 2/20/2013 by /url][/url">@achand][/url][/url here [https://jamfnation.jamfsoftware.com/discussion.html?id=6025

Mobile accounts, but not mobile network home shares.

View solution in original post

6 REPLIES 6

Shawn_Waller
New Contributor II

Mine usually takes less than a minute. Guess i have never timed it but its pretty short when off the network.

lionelgruenberg
New Contributor III

@rcurran Are you using network home folders or mobile accounts? We're using mobile accounts on our lab computers and with our new 2013 iMacs (10.9.5 128GB SSD 3.3 GHz i3) login time is down to 12 seconds

Felipe_hernande
New Contributor III

same here we use mobile accounts.

bentoms
Release Candidate Programs Tester

@Felipe.hernandez, ours are less than a minute.

But I have seen much longer logins. Not sure if the following helps you: https://macmule.com/2011/03/11/slow-login-for-ad-mobile-accounts-when-off-the-office-lan/

jhalvorson
Valued Contributor

Before deploying the following script, we were seeing logins taking 90 to 120 seconds.

Now that I've deployed the following setting via a script, it's about 30 to 45 seconds. The people are happy.

#!/bin/bash     

defaults write /Library/Preferences/com.apple.loginwindow DSBindTimeout -int 15

exit 0

I did a lot of trials with different time values and 15 seconds seemed to be the best. With our AD and current computers, and network structure, I was able to get the value down to 3 seconds without missing the AD validation while the computer was on a wired intranet connection. But the older computers needed more time.

To obtain the number that works for us, I used the information posted on 2/20/2013 by /url][/url">@achand][/url][/url here [https://jamfnation.jamfsoftware.com/discussion.html?id=6025

Mobile accounts, but not mobile network home shares.

rcurran
Contributor

Thank you!! This seems to have made a significant difference! Thank you all for the other tips as well :)