citrix4Slow Login Process (Applying Internet Explorer Branding Policy)

Posted by citrix on July 30, 2009

David Rawnsley

Has anyone got an update to this??

Marek Misiewicz

The fix for the 20 seconds “Applying Internet Explorer Branding policy” is replacing the IE7 branding dll to a IE6 version dll.
I copied [b]iedkcs32.dll[/b] version 16.0.3790.1830 back to the TS and this worked for me !
You can find it in C:\WINDOWS\system32, make sure you make a backup of the original dll. The old dll can be found in windows\i386 folder f.e…

Habeeb Adeokun

I have searched for the file iedkcs32.dll version 16.0.3790.1830 but cant seem to find it on any of our servers running IE6. The only one i could fine was iedkcs32.dll version 16.0.3790.0 and I tried that but it did not work. Can someone please email me the version mentioned in the fix my email is habeeb@adeokun.com. Thanks in advance

Paul Smit

This is great news, i gonna try this immediately.
Good work, shame on MS

Bastian Ulke

Does anybody know if Citrix / Microsoft are going to publish a fix on that?
The solution using the old dll is a workaround but it should not be Citrix’ final answer on that, should it?!

Arild Grebstad

Does anyone have any new solution to this yet? I tried to change my .dll file but i get problems when new users logon, they receive an dll error and the Internet Explorer Branding Policy does not work, the homepage does not get set correctly and so on.

Ortho Lawton

I believe that KB article originally referred to a patch that did work and was subsequently added into SP2, however since that article was published MS released MSIE7 which broke it again and there’s still no patch from MS post MSIE7 that I know of.

Edmund Centella

After calling MS they said this was a known issue to IE7 that they were not going to be able to fix becuase of a core dll. I’m not so sure about that bogus answer but they came up with the following to work around it.

They believed it was due to Group Policy. They had me remove all “trusted sites” settings and “zone security” information from the user config/internet explorer maintenance and had me re-input them into user config/admin templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/ and edit the settings from there for security settings and user config/admin templates/Windows Components/Internet Explorer/security page/Site to zone assignment list for the trusted sites list.

Once I applied these changes I did not have the problem with the applying branding policy and without modifying any dll’s.

The only drawback to this is that users can not add to the “trusted sites list”

Hope this helps.

Joe Jackson

I am trying to speed up my login process as much as possible. I have it pretty well trimed down except for when it get to “Applying Internet Explorer Branding Policy” it then hangs here for about 10 - 15 seconds before going on. All else is really fast. Here is the section from doing a login debug:

USERENV(1e6c.1b70) 16:06:06:156 ProcessGPOs:

USERENV(1e6c.1b70) 16:06:06:156 ProcessGPOs: Processing extension Internet Explorer Branding
USERENV(1e6c.1b70) 16:06:06:156 ReadStatus: Read Extension’s Previous status successfully.
USERENV(1e6c.1b70) 16:06:06:156 CompareGPOLists: The lists are the same.
USERENV(1e6c.1b70) 16:06:06:156 ProcessGPOList: Entering for extension Internet Explorer Branding
USERENV(1e6c.1b70) 16:06:06:156 UserPolicyCallback: Setting status UI to Applying Internet Explorer Branding policy…
USERENV(1e6c.1b70) 16:06:06:171 LogExtSessionStatus: Successfully logged Extension Session data
USERENV(1e6c.1b70) 16:06:06:187 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1e6c.1b70) 16:06:06:296 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1e6c.1b70) 16:06:06:359 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1e6c.1b70) 16:06:06:406 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1e6c.1b70) 16:06:06:406 GetUserNameAndDomain Failed to impersonate user
USERENV(1e6c.1b70) 16:06:06:406 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(1e6c.1b70) 16:06:06:406 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1e6c.1b70) 16:06:06:437 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1e6c.1b70) 16:06:06:453 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1e6c.1b70) 16:06:06:484 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1e6c.1b70) 16:06:06:500 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1e6c.1b70) 16:06:06:531 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1e6c.1b70) 16:06:26:734 UserPolicyCallback: Setting status UI to Applying your personal settings…
USERENV(1e6c.1b70) 16:06:26:734 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(1e6c.1b70) 16:06:27:328 UserPolicyCallback: Setting status UI to Applying your personal settings…
USERENV(1e6c.1b70) 16:06:27:328 ProcessGPOList: Extension Internet Explorer Branding returned 0×0.
USERENV(1e6c.1b70) 16:06:27:328 ProcessGPOList: Extension Internet Explorer Branding was able to log data. RsopStatus = 0×0, dwRet = 0, Clearing the dirty bit
USERENV(1e6c.1b70) 16:06:27:343 ProcessGPOs: