Forgot another question : I can`t capture boot logging because the c:\ drive is refreshed after a reboot. (sort of readonly when a appstack is attached?) Tools i`ve been trying store files during capture on c drive . Can`t change this.
Anyone knows how i can do this?
- Process Monitor (procmon)
- Microsoft Windows Performance Toolkit- Xperf
- WPR (Windows performance recorder)
We use an agent-less scanner (McAfee Move) but I do understand that you cannot go that route.
How many CPU's do you have? What happens if you try to add some more CPU's? You will need at least 2 vCPU's, otherwise Appvolumes and Symantec are both fighting for resources during logon.
And what exclusions do you have? Did you try adding the c:\snapvolumestemp\Mountpoints as an exclusion??
We use 2 vCPU`s and 4 GB memory. We`ve tested with 4vCPU`s and 8GB memory. No change in login performance.
We have the following exclusions :
C:\PROGRAM FILES (X86)\BIGFIX ENTERPRISE\BES CLIENT\BESCLIENT.EXE
C:\PROGRAM FILES\VMWARE\VMWARE VIEW\AGENT\BIN\V4PA_AGENT.EXE
C:\PROGRAM FILES\IMMIDIO\FLEX PROFILES\FLEXSERVICE.EXE
%[PROGRAM_FILES]%Immidio\Flex Profiles\Flex+ Self-Support.exe
That should be enough looking at the exclusions. I would suggest using more then 4GB for a VDI machines but that has got nothing to do with virusscanning and slow logon times, just a best practice.
To be honest I don't now how to fix this. Would it be an option to try and run Windows Defender just as a reference?? It might be the way Symantec works maybe? You will always receive a logon penalty from virus scanners but it should not be this much.
What happens if you try user-assigned instead of computer-assigned?
We also have SEP 14.2.3335.1000 running in our environment with the same exlusions set on our SEPM servers and login times are a minute or less with a couple appstacks applied.
VMs are currently 2CPU/6GB RAM and we have machines on both Windows 10 1709 and 1809 LTSC.
We are seeing the same issue here. Removing SEP altogether has shown a x5 increase in almost anything we use. Logon, AppVolumes attachment, AppV launch and cache, general usability are all dramatically improved.
Are there any additional settings over Application and Device control that can be set to improve performance?