MER was already uploaded.
Helpful would be responding to the case that is open rather than deflecting McAfee's responsibillity in the matter.
The log collection steps while refering to both boot and logon issues only direct you to boot steps. While the same can be followed, it seems to be somewhat of a random data collection attempt.
@mr MER will only help us troubleshoot the issue to a certain extent. The mentioned data set would be needed for a full investigation into this issue by Technical Support. If you have this data, please note down the SR and I'll be happy to take a look.
As already mentioned - the instructions do not apply to the situation, they are about collecting data for a boot issue, not a slow logon that has nothing to do with a boot sequence. We can collect all sorts of data that won't be helpful if we are not targeting the symptoms.
Thanks! I couldn't check the config, as there isn't a MER attached. But from the logs gathered, we can see ALOT of activity for userprofilemanager.exe - make sure this is set as a LOW Risk process with scanning disabled for low risk processes. I would expect the issue to be resolved with those settings.
This is xaba_sg post - I'm adding my info as it may help for all concerned, not to take over the resource.
We already have userprofilemanager.exe excluded.
I opened a post in the forum, to help possibly others with the same problem.
I want to wait for the answer from the SR, before collecting other LOGs. They did not ask me to take the MER too.
I understand that you want to work on exclusions. But, Why with version 10.5.x everything worked fine, without exclusions or anything.
All "standard" exclusions are set, and all Citrix folders and critical processes has been excluded.
I can try...but with 10.5.x everything worked fine.
Just to add one more thing to @chealey analysis...
From ProcMon in the mentioned SR we can also see Citrix hooking in to McAfee process... I would recommend excluding McAfee processes:
How to Disable Citrix API Hooks on a Per-application Basis = https://support.citrix.com/article/CTX107825
CTX107824 . Citrix API Hooks (mfaphook.dll) Explained
CTX221177 . How to verify if Citrix hooks are loaded in a process
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center