Consider the following scenario:
- You are using a Windows Vista or Windows Server 2008-based
computer that is part of a domain that has no Internet access and no cached
Certificate Revocation List (CRL).
- You are using the Advanced Group Policy Management (AGPM) 3.0
- If you are running GPMC.msc, and you select Change
Control, it takes a while to load a Group Policy object (GPO) that is managed
by AGPM and that depends on the network configuration. For
example, it may take 60 seconds or even longer to load the GPO.
This problem occurs because the Authenticode signature
verification process (CRL retrieval) on the AGPM .NET component is for the
To work around this problem, create an Mmc.exe.config that
has the following value:
<?xml version="1.0" encoding="UTF-8" ?>
Then, add this file to the C:\Windows\System32