Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Advanced Group Policy Management (AGPM) takes more than 60 seconds to load Group Policy object (GPO)
Consider the following scenario:
- You are using a Windows Vista or Windows Server 2008-based
computer that is part of a domain that has no Internet access and no cached
Certificate Revocation List (CRL).
- You are using the Advanced Group Policy Management (AGPM) 3.0
client component.
- If you are running GPMC.msc, and you select Change
Control, it takes a while to load a Group Policy object (GPO) that is managed
by AGPM and that depends on the network configuration. For
example, it may take 60 seconds or even longer to load the GPO.
This problem occurs because the Authenticode signature
verification process (CRL retrieval) on the AGPM .NET component is for the
client-side only.
To work around this problem, create an Mmc.exe.config that
has the following value:
<?xml version="1.0" encoding="UTF-8" ?>
<configuration>
<runtime>
<generatePublisherEvidence enabled="false"/>
</runtime>
</configuration>
Then, add this file to the C:\Windows\System32
folder.
Article ID: 973072 - Last Review: July 9, 2009 - Revision: 1.0
APPLIES TO
- Windows Server 2008 for Itanium-Based Systems
- Windows Server 2008 Datacenter
- Windows Server 2008 Enterprise
- Windows Server 2008 Standard
- Windows Vista Business
- Windows Vista Enterprise
- Windows Vista Home Basic
- Windows Vista Home Premium
- Windows Vista Ultimate
| kbtshoot kbexpertiseinter kbsurveynew kbprb KB973072 |
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate