Users experience slow logon on sites with Read-Only Domain Controllers (RODC). Administrators may also notice a spike in processor usage by winlogon.exe for up to 30 seconds.
Depending on the operating system, apply one of the following hotfixes:
CTX133801 – Hotfix XAE500R01W2K8066 - For Citrix XenApp 5.0 for Windows Server 2008 x86
CTX133804 – Hotfix XAE500R01W2K8X64063 - For Citrix XenApp 5.0 for Windows Server 2008 x64
CTX133760 – Hotfix XA600R01W2K8R2X64047 - For Citrix XenApp 6.0 for Windows Server 2008 R2 - English
CTX134055 – Hotfix XA650R01W2K8R2X64011 - For Citrix XenApp 6.5 for Windows Server 2008 R2 - English
The existence of Read-Only Domain Controllers is causing Active Directory Service Interface (ADSI) calls to take longer time, which in turn is causing slower logon and winlogon to spike.