Posted on 06-12-2014 07:20 AM
We are currently seeing machines that have AD Mobile account take a very long time to login once the machine is encrypted and off the network.
Our machines are bound to AD and, when they are not encrypted and off the network they take literally a second or two to login.
s soon as we encrypt the machine, login takes forever (even after multiple reboots). I created a local user and compared both, the local encrypted user took 8 seconds and the Mobile AD user took 3 minutes.
I did happen to reduce the login time a bit using
sudo defaults write /Library/Preferences/com.apple.loginwindow DSBindTimeout -int 1
and rtroutons command ```
defaults write /Library/Preferences/com.apple.mdmclient BypassPreLoginCheck -bool YES
``` I also made sure there were no login/startup policies trying to take place.
As soon as I decrypt the machine, login behaves very quick again. Re-encrypting, back to the same performance.
Any idea what am missing here?
Thanks
Posted on 06-12-2014 08:01 AM
Apple has a KBase article on this behavior and why it happens:
http://support.apple.com/kb/TS4286
There's also another JAMF Nation thread on this: