Por que o “FileSystemControl” está causando longos períodos de inicialização?

Question

Eu tenho um notebook com o Windows 7 associado a um domínio Win2008.

Quando o notebook está conectado à rede do domínio, ele é inicializado em menos de 60 segundos. Mas quando é desconectado da rede (NICs desativadas), pode levar de 5 a 10 minutos apenas para chegar ao prompt de login. O login leva apenas alguns segundos, seja dentro ou fora da rede do domínio, mas o tempo de inicialização é afetado significativamente.

Para diagnosticar esse problema, executei o Process Monitor e fiz o log de tempo de inicialização. O culpado parece ser uma operação "FileSystemControl" ocorrendo no processo svchost:

Vocêpodeverqueotesteresultouemmaisdecincominutosgastosnesseprocesso.

Vejamaisinformaçõesdeprocmonnessainstânciaespecíficadosvchost:

Description:HostProcessforWindowsServicesCompany:MicrosoftCorporationName:svchost.exeVersion:6.1.7600.16385(win7_rtm.090713-1255)Path:C:\Windows\System32\svchost.exeCommandLine:C:\Windows\System32\svchost.exe-kLocalSystemNetworkRestrictedPID:480ParentPID:792SessionID:0User:NTAUTHORITY\SYSTEMAuthID:00000000:000003e7Architecture:64-bitVirtualized:FalseIntegrity:SystemStarted:10/12/201710:48:39AMEnded:(Running)Modules:user32.dll0x76de00000xfa000C:\Windows\System32\user32.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)11/10/201612:33:04PMkernel32.dll0x76ee00000x11f000C:\Windows\System32\kernel32.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)10/11/201611:34:45AMntdll.dll0x770000000x1aa000C:\Windows\System32\ntdll.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)10/11/201611:33:37AMsvchost.exe0xff1400000xb000C:\Windows\System32\svchost.exeMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20161:44:07PMnetcfgx.dll0x7fef9d800000x84000C:\Windows\System32\netcfgx.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20163:00:42PMmsxml6.dll0x7fefa6c00000x1f1000C:\Windows\System32\msxml6.dllMicrosoftCorporation6.30.7601.234033/25/20163:00:58PMWinSCard.dll0x7fefa8c00000x39000C:\Windows\System32\WinSCard.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20163:05:03PMwlanutil.dll0x7fefa9000000x7000C:\Windows\System32\wlanutil.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:35:22PMl2gpstore.dll0x7fefa9100000x15000C:\Windows\System32\l2gpstore.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20162:59:04PMwlgpclnt.dll0x7fefa9300000x1f000C:\Windows\System32\wlgpclnt.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:35:26PMeappcfg.dll0x7fefa9500000x44000C:\Windows\System32\eappcfg.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20162:57:49PMeappprxy.dll0x7fefa9a00000x14000C:\Windows\System32\eappprxy.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20162:57:52PMonex.dll0x7fefa9c00000x40000C:\Windows\System32\onex.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)11/20/20109:12:24AMwlansec.dll0x7fefaa000000x7d000C:\Windows\System32\wlansec.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20163:05:34PMwlanmsm.dll0x7fefaa800000x6a000C:\Windows\System32\wlanmsm.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20163:05:32PMdhcpcsvc.dll0x7fefab300000x18000C:\Windows\System32\dhcpcsvc.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20162:57:13PMwlansvc.dll0x7fefab500000xdd000C:\Windows\System32\wlansvc.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20163:05:35PMwinnsi.dll0x7fefae000000xb000C:\Windows\System32\winnsi.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20163:04:56PMIPHLPAPI.DLL0x7fefae100000x27000C:\Windows\System32\IPHLPAPI.DLLMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20162:59:05PMuxsms.dll0x7fefb1b00000x10000C:\Windows\System32\uxsms.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20163:04:24PMcomctl32.dll0x7fefb1c00000x1f4000C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23403_none_e36ad4593102f066\comctl32.dllMicrosoftCorporation6.10(win7_rtm.090713-1255)3/25/20162:55:01PMwtsapi32.dll0x7fefb3c00000x11000C:\Windows\System32\wtsapi32.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:34:20PMmstask.dll0x7fefb4a00000x3d000C:\Windows\System32\mstask.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)11/20/20109:07:51AMtaskschd.dll0x7fefb4e00000x127000C:\Windows\System32\taskschd.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20163:04:00PMdsrole.dll0x7fefb6600000xc000C:\Windows\System32\dsrole.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:27:57PMPeerDist.dll0x7fefb6900000x30000C:\Windows\System32\PeerDist.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:32:20PMcscsvc.dll0x7fefb7b00000xad000C:\Windows\System32\cscsvc.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20162:59:51PMavrt.dll0x7fefb9c00000x9000C:\Windows\System32\avrt.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:25:42PMpropsys.dll0x7fefb9d00000x12c000C:\Windows\System32\propsys.dllMicrosoftCorporation7.00.7601.23403(win7sp1_ldr.160325-0600)3/25/20163:02:16PMMMDevAPI.dll0x7fefbb400000x4b000C:\Windows\System32\MMDevAPI.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:29:12PMpowrprof.dll0x7fefbb900000x2c000C:\Windows\System32\powrprof.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20163:03:06PMaudiosrv.dll0x7fefbbc00000xac000C:\Windows\System32\audiosrv.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)6/14/20161:16:37PMpcwum.dll0x7fefbfa00000xd000C:\Windows\System32\pcwum.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:32:16PMgpapi.dll0x7fefbfe00000x1b000C:\Windows\System32\gpapi.dllMicrosoftCorporation6.1.7601.23452(win7sp1_ldr.160512-0600)5/12/20161:14:54PMdevrtl.dll0x7fefc0000000x12000C:\Windows\System32\devrtl.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20162:56:36PMcredssp.dll0x7fefc0f00000xa000C:\Windows\System32\credssp.dllMicrosoftCorporation6.1.7601.23642(win7sp1_ldr.170105-0730)1/5/20172:56:06PMrsaenh.dll0x7fefc2100000x47000C:\Windows\System32\rsaenh.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:32:41PMcryptsp.dll0x7fefc5100000x18000C:\Windows\System32\cryptsp.dllMicrosoftCorporation6.1.7601.23471(win7sp1_ldr.160614-0600)6/14/20161:20:25PMkerberos.dll0x7fefc5300000xb8000C:\Windows\System32\kerberos.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)1/5/20172:55:07PMbcrypt.dll0x7fefc6600000x22000C:\Windows\System32\bcrypt.dllMicrosoftCorporation6.1.7601.23642(win7sp1_ldr.170105-0730)1/5/20172:52:20PMauthz.dll0x7fefc6e00000x2f000C:\Windows\System32\authz.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:25:28PMcryptdll.dll0x7fefc7900000x14000C:\Windows\System32\cryptdll.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20162:59:39PMsecur32.dll0x7fefcaa00000xb000C:\Windows\System32\secur32.dllMicrosoftCorporation6.1.7601.23642(win7sp1_ldr.170105-0730)1/5/20172:53:22PMsysntfy.dll0x7fefcaf00000xa000C:\Windows\System32\sysntfy.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:33:52PMsspicli.dll0x7fefcb000000x25000C:\Windows\System32\sspicli.dllMicrosoftCorporation6.1.7601.23642(win7sp1_ldr.170105-0730)1/5/20172:53:22PMcryptbase.dll0x7fefcb900000xf000C:\Windows\System32\cryptbase.dllMicrosoftCorporation6.1.7601.23642(win7sp1_ldr.170105-0730)1/5/20172:56:10PMwinsta.dll0x7fefcc400000x3d000C:\Windows\System32\winsta.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20163:05:14PMRpcRtRemote.dll0x7fefcc800000x14000C:\Windows\System32\RpcRtRemote.dllMicrosoftCorporation6.1.7601.17514(win7sp1_rtm.101119-1850)11/20/20109:13:19AMprofapi.dll0x7fefcd300000xf000C:\Windows\System32\profapi.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)7/13/20099:32:15PMmsasn1.dll0x7fefcd400000xf000C:\Windows\System32\msasn1.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20163:00:37PMuserenv.dll0x7fefcd500000x1f000C:\Windows\System32\userenv.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20163:04:17PMdevobj.dll0x7fefcd700000x1a000C:\Windows\System32\devobj.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20162:56:35PMKernelBase.dll0x7fefcd900000x6a000C:\Windows\System32\KernelBase.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)10/11/201611:34:46AMcfgmgr32.dll0x7fefcec00000x36000C:\Windows\System32\cfgmgr32.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20162:55:52PMwintrust.dll0x7fefcf200000x3b000C:\Windows\System32\wintrust.dllMicrosoftCorporation6.1.7601.23566(win7sp1_ldr.161004-0600)10/4/201611:32:42AMcrypt32.dll0x7fefcf600000x16d000C:\Windows\System32\crypt32.dllMicrosoftCorporation6.1.7601.23566(win7sp1_ldr.161004-0600)10/4/201611:35:07AMshlwapi.dll0x7fefd0f00000x71000C:\Windows\System32\shlwapi.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20163:03:19PMmsvcrt.dll0x7fefd4500000x9f000C:\Windows\System32\msvcrt.dllMicrosoftCorporation7.0.7601.23403(win7sp1_ldr.160325-0600)3/25/20163:00:48PMgdi32.dll0x7fefd4f00000x67000C:\Windows\System32\gdi32.dllMicrosoftCorporation6.1.7601.23591(win7sp1_ldr.161106-0500)11/6/201612:33:28PMlpk.dll0x7fefd6f00000xe000C:\Windows\System32\lpk.dllMicrosoftCorporation6.1.7601.23587(win7sp1_ldr.161102-0600)11/2/201611:32:33AMsetupapi.dll0x7fefd7000000x1d7000C:\Windows\System32\setupapi.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20163:03:11PMrpcrt4.dll0x7fefd8e00000x12d000C:\Windows\System32\rpcrt4.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)1/5/20172:52:35PMsechost.dll0x7fefda100000x1f000C:\Windows\System32\sechost.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20163:03:24PMws2_32.dll0x7fefda300000x4d000C:\Windows\System32\ws2_32.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)5/11/20161:02:51PMshell32.dll0x7fefda800000xd8c000C:\Windows\System32\shell32.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20163:03:14PMoleaut32.dll0x7fefe8300000xda000C:\Windows\System32\oleaut32.dllMicrosoftCorporation6.1.7601.2356910/7/201611:32:52AMusp10.dll0x7fefe9100000xca000C:\Windows\System32\usp10.dllMicrosoftCorporation1.0626.7601.23585(win7sp1_ldr.161027-0600)10/27/201611:33:58AMclbcatq.dll0x7fefecb00000x99000C:\Windows\System32\clbcatq.dllMicrosoftCorporation2001.12.8531.23403(win7sp1_ldr.160325-0600)3/25/20162:56:08PMnsi.dll0x7fefed500000x8000C:\Windows\System32\nsi.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20163:01:49PMadvapi32.dll0x7fefed600000xdb000C:\Windows\System32\advapi32.dllMicrosoftCorporation6.1.7601.23572(win7sp1_ldr.161011-0600)10/11/201611:32:00AMmsctf.dll0x7fefee400000x109000C:\Windows\System32\msctf.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)10/11/201611:33:06AMimm32.dll0x7fefef500000x2e000C:\Windows\System32\imm32.dllMicrosoftCorporation6.1.7601.23403(win7sp1_ldr.160325-0600)3/25/20162:58:42PMole32.dll0x7fefef800000x203000C:\Windows\System32\ole32.dllMicrosoftCorporation6.1.7600.16385(win7_rtm.090713-1255)3/25/20163:01:56PMStack:0fltmgr.sysfltmgr.sys+0x20f70xfffff88000c770f7C:\Windows\system32\drivers\fltmgr.sys1fltmgr.sysfltmgr.sys+0x2fc70xfffff88000c77fc7C:\Windows\system32\drivers\fltmgr.sys2fltmgr.sysfltmgr.sys+0x209420xfffff88000c95942C:\Windows\system32\drivers\fltmgr.sys3ntoskrnl.exentoskrnl.exe+0x37f57a0xfffff80002f9857aC:\Windows\system32\ntoskrnl.exe4ntoskrnl.exentoskrnl.exe+0x3937fa0xfffff80002fac7faC:\Windows\system32\ntoskrnl.exe5ntoskrnl.exentoskrnl.exe+0x34cf420xfffff80002f65f42C:\Windows\system32\ntoskrnl.exe6ntoskrnl.exentoskrnl.exe+0x6f6930xfffff80002c88693C:\Windows\system32\ntoskrnl.exe7ntdll.dllntdll.dll+0x4c0ca0x7704c0caC:\Windows\System32\ntdll.dll8cscsvc.dllcscsvc.dll+0x1f3b0x7fefb7b1f3bC:\Windows\System32\cscsvc.dll9cscsvc.dllcscsvc.dll+0x6f670x7fefb7b6f67C:\Windows\System32\cscsvc.dll10kernel32.dllkernel32.dll+0x159cd0x76ef59cdC:\Windows\System32\kernel32.dll11ntdll.dllntdll.dll+0x2a5610x7702a561C:\Windows\System32\ntdll.dll

Oquepossofazerparainvestigarissoeresolvê-lo?"FileSystemControl" não me diz muito sobre o que está causando os longos tempos de inicialização.

    

Answer 1

Acontece que duas configurações foram enterradas em um GPO criado por outra pessoa:

Ovalorpara"Especificar o tempo de espera de processamento da política de inicialização" foi definido como 5 minutos e a opção "Sempre esperar pela inicialização da rede no computador" foi ativada, causando longos tempos de inicialização.