Windows 2000 Group Policy Slow Link Processing

In Microsoft Windows 2000, Group Policy processing adapts automatically when a user logs on across a slow network connection. During startup and logon, the operating system measures the network transfer speed between the client and the domain controller. If the connection falls below a specified bandwidth threshold, Windows 2000 triggers "slow link" mode, altering how user policies are applied by skipping bandwidth-heavy client-side extensions—such as software deployment and folder redirection—while still applying critical settings like administrative templates and security configurations.

Detection Mechanism

Windows 2000 uses the Network Provider and ICMP (Internet Control Message Protocol) to evaluate link speed before processing Group Policy:

  1. Ping Latency Check: The client issues ICMP echo requests to the authenticating domain controller to measure round-trip time.
  2. Transfer Rate Calculation: The system sends zero-byte and non-zero-byte packets to gauge the throughput.
  3. Threshold Comparison: By default, if the calculated transfer rate is less than 500 kilobits per second (Kbps), or if the time-out value is exceeded, the connection is classified as a slow link.

Once a slow link is detected, Windows 2000 handles user Group Policy through individual Client-Side Extensions (CSEs). To conserve bandwidth and prevent prolonged logon delays, extensions behave differently:

  • Administrative Templates (Registry Policies): Processed normally. Standard user registry modifications are small in size and execute without restriction.
  • Security Settings and IPSec: Processed normally to ensure workstation and domain security parameters remain intact.
  • Scripts (Logon and Logoff): Executed by default, though network-based scripts may run slower depending on their complexity.
  • Software Installation: Disabled by default. Windows 2000 skips advertising or pushing new applications over slow connections to prevent massive file downloads across dial-up or low-bandwidth WAN connections.
  • Folder Redirection: Disabled by default. Redirecting paths such as "My Documents" or "Application Data" to a network share is bypassed to prevent performance degradation and file synchronization stalls.
  • Disk Quota Settings: Disabled by default.

Administrative Customization

Administrators can modify both the detection parameters and how individual policies respond to slow connections using the Group Policy Microsoft Management Console (MMC) snap-in:

  • Modifying the Threshold: Under Computer Configuration -> Administrative Templates -> System -> Group Policy, the policy setting "Group Policy slow link detection" allows administrators to change the threshold from the 500 Kbps default or set it to 0 to disable slow link detection entirely.
  • Overriding Extension Behavior: Under the same path, administrators can configure policies such as "Software installation policy processing" or "Folder redirection policy processing" to explicitly enable the option "Allow processing across a slow network connection."