+ Post New Thread
Results 1 to 12 of 12
Windows 7 Thread, "The Group Policy Client service failed the logon. Access is denied" in Technical; Hi all, I do not normally post on here, however I seem to having an annoying problem. Currently some teachers ...
  1. #1

    Join Date
    Apr 2009
    Posts
    57
    Thank Post
    11
    Thanked 2 Times in 2 Posts
    Rep Power
    12

    "The Group Policy Client service failed the logon. Access is denied"

    Hi all,

    I do not normally post on here, however I seem to having an annoying problem.

    Currently some teachers when they loin in the morning are getting this error:

    gp_error.JPG

    This started last Tuesday. Its happening on random staff members. Some staff members have this problem once and then it doesn't come back. Staff use raoming profiles. No GPO's have been sent out to the Pc's before the problem started.

    From our testing we noticed the the NTUSER file is reverting back to 256KB when they receive the error above. To fix this, we are either resetting the profile or replacing the NTUSER file with a backup copy.

    Does anyone else have a cure for this?

    Thanks
    Matt

  2. #2

    Join Date
    Dec 2008
    Location
    Medway Towns
    Posts
    202
    Thank Post
    50
    Thanked 31 Times in 27 Posts
    Rep Power
    18
    My googling on the subject suggested that it was worth checking the list of profiles showing on the system, and comparing that to the "ProfileList" entries in the registry, in some cases there was a discrepancy.

  3. #3

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    We always kill the locally cached profile through the UI to fix this, it is a busted reg that goo can't apply to I think. Delprof2 in a logon script usually takes care of it, just don't apply to laptops with cached profiles.

  4. #4

    Join Date
    Oct 2010
    Location
    Yorkshire
    Posts
    10
    Thank Post
    6
    Thanked 5 Times in 3 Posts
    Rep Power
    9
    Hi, we are having this exact same issue as in the original post on this thread, even down to the profiles reverting to 256k on the server side and us having to restore from backup etc. Can anyone confirm that using the Delprof2 solution worked for them?

    - - - Updated - - -

    Hi, we are having this exact same issue as in the original post on this thread, even down to the profiles reverting to 256k on the server side and us having to restore from backup etc. Can anyone confirm that using the Delprof2 solution worked for them?

  5. #5

    Join Date
    May 2011
    Posts
    57
    Thank Post
    6
    Thanked 6 Times in 6 Posts
    Rep Power
    9
    We have been seeing this error here recently only in the last couple of weeks. Deleting the local profile and then having the user log back fixes the issue. I have no idea whats caused this to start happening though.

    - - - Updated - - -

    We have been seeing this error here recently only in the last couple of weeks. Deleting the local profile and then having the user log back fixes the issue. I have no idea whats caused this to start happening though.

  6. #6

    Join Date
    Apr 2009
    Posts
    57
    Thank Post
    11
    Thanked 2 Times in 2 Posts
    Rep Power
    12
    Quote Originally Posted by Badzeye View Post
    We have been seeing this error here recently only in the last couple of weeks. Deleting the local profile and then having the user log back fixes the issue. I have no idea whats caused this to start happening though.

    - - - Updated - - -

    We have been seeing this error here recently only in the last couple of weeks. Deleting the local profile and then having the user log back fixes the issue. I have no idea whats caused this to start happening though.
    We are still having this issue. Could @SYNACK please expand on how you got around this problem?

    Thanks

  7. #7

    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,582
    Thank Post
    59
    Thanked 371 Times in 287 Posts
    Blog Entries
    7
    Rep Power
    134
    I had one with a similar but not the same error, ours was "Windows could not connect to the group policy service client service". I found this on the internet somewhere which fixed that error. It may be worth trying for yours too?

    There are two places to look in the registry:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es this path should contain gpsvc key (a folder), which is responsible for service parameters and configuration. I found that the key was intact, so, you do not touch anything here - just check that the key exists.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SVCHOST This is the most important path you should look into, as it must contain the keys and values referred in the key #1. Below are descriptions what must be present there.
    There must be Multi-String value called GPSvcGroup. My laptop was missing it. So, you should create multi-string value named GPSvcGroup and assign it value GPSvc.
    Next, you must create a key (a folder) and name it GPSvcGroup - this key normally should be there, but, again, it was missin on my laptop.
    Then open newly-created GPSvcGroup folder and create 2 DWORD values:
    First called AuthenticationCapabilities and you must give it a value of 0x00003020 (or 12320 in decimal)
    Second is called CoInitializeSecurityParam and it must have value of 1.
    Once you complete all steps above, reboot the computer and the problem will be fixed.

  8. #8

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Quote Originally Posted by mdking View Post
    We are still having this issue. Could @SYNACK please expand on how you got around this problem?

    Thanks
    I just removed the local profiles and if it reoccoured I killed the server copy and just had it rebuild. We got around a lot of it by running delprof2.exe in a machine startup script to clear out the local copies of profiles on each startup which largely cured the problem.

  9. #9

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    Can't say I've ever seen this error - where's the link between profiles and the Group Policy client error message?

    I'm speculating you have one more than one DC, hence why some users see the problem and others do not. It could well be one of your DCs isn't replicating data correctly.

  10. #10

    Join Date
    Mar 2014
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by SYNACK View Post
    I just removed the local profiles and if it reoccoured I killed the server copy and just had it rebuild. We got around a lot of it by running delprof2.exe in a machine startup script to clear out the local copies of profiles on each startup which largely cured the problem.
    I'd be interested to know how you scripted this, it's not really my forte, have had a play with VBS and am now looking at Powershell. I understand DelProf2 has to be run as a local admin, I don't really wish to place the admin password in a VB script, nor do I wish having to enable Powershell across the network clients, so my next option was to look at running a PS script remotely against the machines.

    I was hoping for this to run as a group policy shutdown script originally.

  11. #11

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Quote Originally Posted by murthybruit View Post
    I'd be interested to know how you scripted this, it's not really my forte, have had a play with VBS and am now looking at Powershell. I understand DelProf2 has to be run as a local admin, I don't really wish to place the admin password in a VB script, nor do I wish having to enable Powershell across the network clients, so my next option was to look at running a PS script remotely against the machines.

    I was hoping for this to run as a group policy shutdown script originally.
    Just a batch file put in group policy as a startup script that way it runs as system level so needs no extra privilages. I run it at startup because otherwise some of the profiles would not be deleted as they would still be locked in the file system.

  12. #12

    Join Date
    Mar 2014
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by SYNACK View Post
    Just a batch file put in group policy as a startup script that way it runs as system level so needs no extra privilages. I run it at startup because otherwise some of the profiles would not be deleted as they would still be locked in the file system.
    Thanks for the Response, are you calling the exe from a network share or is it being executed local?

    Thanks



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 11
    Last Post: 21st November 2013, 12:32 PM
  2. group policy client services ??
    By seaspirit in forum Windows 7
    Replies: 0
    Last Post: 3rd October 2012, 03:37 PM
  3. Replies: 1
    Last Post: 12th November 2010, 04:29 PM
  4. Group Poliy Client service failed at logon
    By jlucas in forum Windows 7
    Replies: 5
    Last Post: 27th August 2010, 11:32 AM
  5. Replies: 1
    Last Post: 16th July 2010, 03:40 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •