Hi, we're on our first site deployment today (over more 300 sites to do next months), and we encounter problems we didn't have on our labs. We use exactly same domain and GPO (without any logon or logoff script). The only difference is that we use WAN connections to DC with 30ms TTL I searched the forums and KB and didn't find any correct solution. When we logoff, we have 15 to 40 seconds delay with the following events. Thanks by advance for your help, Jean-Yves Moschetto, jeanyves.moschetto@yoursystems.eu, MCSE since 1997, MCITP, Trainer, www.yoursystems.eu - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System> <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" /> <EventID Qualifiers="16384">4101</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-02-02T09:15:02.000000000Z" /> <EventRecordID>727</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>***</Computer> <Security /> </System> - <EventData> <Data>0x00000000</Data> <Data>0x00000001</Data> </EventData> </Event> - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System> <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" /> <EventID Qualifiers="32768">6003</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-02-02T09:14:39.000000000Z" /> <EventRecordID>726</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>***</Computer> <Security /> </System> - <EventData> <Data>TrustedInstaller</Data> <Binary>D9060000</Binary> </EventData> </Event> - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System> <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" /> <EventID Qualifiers="32768">6003</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-02-02T09:14:38.000000000Z" /> <EventRecordID>725</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>***</Computer> <Security /> </System> - <EventData> <Data>TrustedInstaller</Data> <Binary>D9060000</Binary> </EventData> </Event>

Hi, Thanks for posting in Microsoft TechNet Forum. Based on my research, the event 6003 indicates the winlogon notification subscriber <TrustedInstaller> was unavailable to handle a critical notification event, this may be caused by software conflicts or incompatible component on Windows 7. In this situation, I suggest you try the following steps to check the result: 1. Install the recent updates of Windows 7. 2. Update the hardware drivers to the latest. 3. if this issue persists, we can perform a clean boot to determine the root cause. Hope it helps. Alex Zhao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, I am just writing to check the status of this thread. Was the information that I provided in my previous reply helpful to you? Do you have any further questions or concerns? Please feel free to let us know. If you could update us at your earliest convenience that would be wonderful. Have a good day! Alex Zhao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish. BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts. Alex Zhao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.