hUe9

Thanks for the fast reply, i read that article, but on all other machines is this happening automaticaly, and it is not set by us... problem is that nothing happens when log is full, it just remain there, last line says:2013-03-11 13:05:45 INFO-EVENTS-LOST - - - - - - - - - - - - 1826 -

Hello everybody We have issue with firewall in windows7: on few notebooks (HP 4730s) which came preinstalled with win7pro64 and are joined in domain, when pfirewall.log file reach the size of 32 MB (specified by "netsh advfirewall set allprofiles logging maxfilesize 32767"), and system should rename it to pfirewall.log.old and start logging to new file, nothiong happens.I searched the web and found no info about this... Does anyone have experience with this problem, or idea what direction to go please?

I did nothing, it seems to be "random".. yesterday i tried to clone system to 80GB seagate baracuda, and now system is slower to boot, but shutdown/logoff is normal, around 15s. It have to be something with taht ssd.. but is new and 100% healthy, this one is KINGSTON SH103S3120G, but we have same problem with machines with INTEL SSDSC2CW120A3... its realy annoying because we want to buy all new machines with ssd. EDIT: removing gpsvc from HKLM\CurrentControlSet\Control PreshutdownOrder fixed this problem, when later aded back, system still loging off fast, but on other sysytem with almost same specs this did not help

Hello and thanks for fast reply actualy pasword policies (Enforce password history 24 days, max age 365, min age 0,min lenght 7chars) and audit policy (audit account management succes/failure, audit logon events succes/failure, audit system events succes/failure) are aplied localy, no GPO from server i uploaded few traces to http://fbe.am/hGQ they are in.xml and compressed, i can uploadt .etl files if needed, pwd via PM.

Hello, reading through this thread i believe i found place where can i get some help or info at least. I ran into strange issue: on new and freshly installed and updated machines (win7pro64sp1) after first reboot and joining domain the pc's start to have problem with really slow shutting down,and logging off. Sometimes it shuts down immediately, but in most cases it takes 5 or even 10 minutes. Clearing page file was disabled and wait to kill service set to 2000, but no effect, machine hardware vary but all have ivy bridge cpu i3/i5, 120GB ssd drive and 8GB of 1600 Mhz RAM. I looked in event viewer and noticed number of events 6005 stating that:The winlogon notification subscriber <GPClient> is taking long time to handle the notification event (EndShell), and 6006: The winlogon notification subscriber <GPClient> took 524 second(s) to handle the notification event (End Shell). I did:xbootmgr -trace shutdown -noPrepReboot -traceFlags BASE+DRIVERS+CSWITCH+POWER -resultPath c:\shutdowntraceand:xperf /tti -i shutdown9.etl -o shutdown9_info.xml -a shutdown. I spent two days trying to figure out, but no succes...so, please help,i need some magic.