Slow login once FV2 enabled

sinergi
New Contributor III

We are currently seeing machines that have AD Mobile account take a very long time to login once the machine is encrypted and off the network.

Our machines are bound to AD and, when they are not encrypted and off the network they take literally a second or two to login.

s soon as we encrypt the machine, login takes forever (even after multiple reboots). I created a local user and compared both, the local encrypted user took 8 seconds and the Mobile AD user took 3 minutes.

I did happen to reduce the login time a bit using

sudo defaults write /Library/Preferences/com.apple.loginwindow DSBindTimeout -int 1

and rtroutons command ```
defaults write /Library/Preferences/com.apple.mdmclient BypassPreLoginCheck -bool YES
``` I also made sure there were no login/startup policies trying to take place.

As soon as I decrypt the machine, login behaves very quick again. Re-encrypting, back to the same performance.

Any idea what am missing here?

Thanks

1 REPLY 1

rtrouton
Release Candidate Programs Tester

Apple has a KBase article on this behavior and why it happens:

http://support.apple.com/kb/TS4286

There's also another JAMF Nation thread on this:

https://jamfnation.jamfsoftware.com/discussion.html?id=6025