In a healthcare setting with a hybrid environment, we're dealing with a large number of shared machines for thousands of users. When users log into a computer they've used before, the login process takes under 15 seconds. However, for first-time users on a shared machine, it can stretch to around 40 seconds, which is too long in a fast-paced environment like healthcare. We've moved all Group Policy Objects (GPOs) to Intune, but the delay primarily occurs at the 'Preparing Windows' screen during the initial login. I'm aware of Imprivata OneSign, but it's not a viable option since we want individual accounts for users. We've also explored VDI but lack the budget for that. I've tried using Intune's Fast First Sign-In feature without success, and I could consider using PowerShell to pre-create user profiles on shared devices. Essentially, I need to find a way to create a local account template that will expedite the sign-in process for new users instead of setting everything up from scratch.
4 Answers
It sounds like you're dealing with quite a challenge! Given the number of shared machines, you might want to ensure that all non-essential provisioning packages are removed from the user profiles. Fewer items to load during login could speed things up. I also suggest checking the registry to disable any unnecessary first login animations. That's worked for some folks to reduce the waiting time at login.
Looking into the user profile management is key here. Some organizations have found success storing user profiles on the network, which can help with the load time. It may not work for everyone, but it’s worth considering! Also, have you thought about using User State Migration Tool (USMT) to streamline the process?
I love USMT for quick migrations! That could save you some serious time with profile setups.
Honestly, 40 seconds isn’t terrible in the grand scheme for first logins. You might want to consider a registry tweak to disable the first login animations. Some users found that it sped things up a bit! You’ll find the option in the registry under HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem.
I’ve heard about that! It's supposed to make a difference in preparation time, but it might not solve everything in your case since your main bottleneck seems to be that 'Preparing Windows' screen.
It might also help if you’re running scripts at login. Just remember to check what’s loading with every user login. If there are specific apps that can be skipped on first logon or set to run later, that could speed things up.
Good advice! Being selective about what runs at startup could definitely reduce the load time.
That's a good point! Minimizing what loads at login can help significantly. Also, make sure your PCs are using NVMe storage if possible, as that can speed up profile creation a lot.