Group Poliy Client service failed at logon

[jlucas]

We've just come across this big problem with student logins here.

 

Every time a student tries to log in we get "The Group Policy Client service failed at logon. Access is Denied"

 

The student cannot therefore log in. This happens with both mandatory profiles and I have tried changing to roaming profiles and still the same problem.

 

I have tried with new students (i.e. students that havent logged onto the pc before) and it is still the same (so not a profile/registry sid error).

 

Anyone have any ideas?

 

Cheers

James

[andydis]

whom is the service set to logon as in services snap in?

 

start > run > services.msc [enter]

find group policy client double click

logon tab ??

 

it should be local system account?

[jlucas]

Yep its logging on as the local system account.

[SYNACK]

This has always been a corrupted profile issue for me, try wipeing any cached profiles on the box and if that does not work drop the machine off the domain and re-add it.

[carvjo]

We were getting this - what we did to fix it..

 

* attempt to logon to a machine as student - get the failed message

** logon as an administrative user - then look at event logs

 

for us - system events showed that GPO's relating to IE Branding were the problem - we deleted these and it has been fine since..

 

it could be any number of things - the clue will be in the event logs..

 

Hope that helps..

 

John

[jlucas]

Thanks everyone for your help, you've all help me by pointing me in the right direction.

 

I found an error in the logs (the winlogon notification subscriber failed a critical notification event) which, after a few searches pointed me to it being a profile issue. I then check out the profile and it was missing over half the files I originally copied to it.

Luckily I still had the original so I've just had to copy everything back over and it now works fine.

 

One thought I did have was that the profile was stored on an old Server2003 server so I have put the new profiles on a '08R2 now.

 

Cheers

James