Pass credential phase of logon takes ~10 sec

I'm running CB Enterprise Win10 x64, bound to a domain which uses active directory authentication. When I type in my pass and hit enter, nothing happens for about 10 seconds, then it takes me in. The cursor even stays blinking as if I didn't hit anything. I'm worried this will be confusing for my users. The time it takes is not always the same, sometimes it's less than 2 seconds, sometimes more than 15, but it's usually around 10. It also happens both on the same network as the domain and off, and both if you get the pass right or wrong.

On win 7, 8, and 8.1, it would take a long time to log in if you were outside of the domain's network and got your password wrong, which I assumed was because it was checking the domain to see if the password had changed from what it had cached, and then would time out (20+ seconds). If you got the pass right, it would let you in instantly.

Just curious if anyone else has experienced this, and if you have, how did you fix it or are you just living with it?

Could be so many reasons. Policies may be loading; DNS issues; updates occurring. Look in the event logs for some clues perhaps. Check with msconfig for startup programs.
Try some network analysis (Wireshark?) to see what's going on.