The Group policy Client service failed the login. Access is denied

[wyltk75]

I know that a similar thread has been posted, but the problem seems to be different, though fundamentally the same.

I created a mandatory profile on our server (\\DC1Server\profiles\standardpro2.v2)

I created a network login pointing to that mandatory profile (userprofile1).

This network login works fine with no problems at all. The problem comes in when I created a second user (userprofile2) which points to the same profile. It gets the error in the title.

"The group policy client service failed the login. Access is denied"

The mandatory profile I created has full control permissions for "everyone".

I have created at least 3 other profiles with varying names and passwords and pointed it to the profile I created, with the same result. The only account that seems to work is the first one. And, by the way, the mandatory profile I created was from a different account altogether, so it wasn't originally created from userprofile1.

Any thoughts?

[Finch7]

Possibly permissions in the registry itself rather than NTFS permissions which you mention you did.

regdit > load hive> find ntuser.man> permissions > check students have at least read permissions.

[wyltk75]

Thanks, I'll give that a look. You are talking about on the server or on the workstations?

[Finch7]

you can run regeidt on your own workstation.

[wyltk75]

The permissions are correct on the ntuser.man file as well. "Everyone" has full permissions.

[jinnantonnixx]

We were plagued by this fault on our systems, I wrote a start-up script to fix it - details in this thread:

Windows 7 user profile failed error...... again!

[wyltk75]

Thank you! I'll give it a try!

[Finch7]

The permissions are correct on the ntuser.man file as well. "Everyone" has full permissions.

I assume you mean in?

regedit.png

[3s-gtech]

Yeah, this will be the permissions on the registry entries in ntuser.man.

Open up regedit (can be on anything, server or workstation as you won't be modifying the existing registry). Select HKEY_USERS, then click File, Load Hive. Select the ntuser.man file. Give it a name, and it'll appear under HKEY_USERS. Then right click on it, go to Properties, and change the permissions as you would with a file (select Everyone and Full Control for best results). Now click File, Unload Hive. That'll save the changes. Now try logging in with it.

[wyltk75]

I assume you mean in?

regedit.png

Yes. I'm chalking this issue up to a corrupt profile, though I can't quite tell where. I started from scratch on a new profile and everything works as planned.

Thanks so much for your help guys.