Situation: The client is running Windows 2012 R2 server. The Event logs show these ID 6005 Description: The winlogon notification subscriber <subscriber> is taking long time to handle the notification event.
Event ID 6006, Description: The winlogon notification subscriber <Profiles> took 606 second(s) to handle the notification event (Logon).
Troubleshooting: In most cases, this is the DNS issue. In our case, Reverse Lookup Zones has a double DNS record. for example server1 and server2 have the same IP address. That cause login slow.
That also could be GP Folder Redirection and Drive Mapping drive issue.