Problem:
The windows clients are joined into a school server and they take too long to load the GPOs.
Solution:
To identify and address the problem, follow these steps:
1. Check DNS SRV Records:
Use the following command to verify DNS SRV records on the school server:
/usr/share/univention-samba4/scripts/check_essential_samba4_dns_records.sh
The output should reference to the school server. If the output also shows multiple servers like the primary or other school servers, the windows clients will try to communicate with these servers as well.
2. Resync DNS Records:
If other servers are referenced by the previous command, a resync of these DNS records should be performed.
/usr/share/univention-s4-connector/resync_object_from_ucs.py --filter univentionObjectType="dns/srv_record"
3. Verify GPO Loading:
After resyncing the DNS records, check if the GPO loading time has improved on the Windows clients. If the issue persists, proceed to the next step.
4. Migrate DNS Data:
If the problem persists, it may be necessary to migrate DNS data. Follow the steps outlined in this article:
HowTo: Migrate Samba 4 DNS Data from the Legacy to the Default Partition
This guide provides detailed instructions on migrating Samba 4 DNS data from the legacy to the default partition. After completing the migration, retest GPO loading times on Windows clients.