I am currently troubleshooting slow logon times for a client with computer
infrastructure spread across the globe. Before I start invesagating I want to
create a baseline for logon times.

I have modified the clients logon script to record when it starts and when
it ends. I am using the computers tick count to record how long the computer
has been on, but realize that there is a space of time between the user
authenicating to the computer (control-alt-delete) and when the logon script
starts, if the customer turns his computer on and then leave for an extended
period of time I have to be able to subtract the time span.

Is there a time stamp that is set when the computer is at the GINA window?
This would be after the computer has applied computer settings and network

Any help greatly appreciated.