Sign in to follow this  

The Group Policy Client service failed the logon. Access denied.

Recommended Posts

game_over    711

"The Group Policy Client service failed the logon. Access denied."


Some computers have started receiving this error when logging on, i have 31 Windows 7 networked PCs in a room and it seems to be completely random. Sometimes a simple restart can fix it... other times it's just one account which will work again at a later time.. if it fails i can login using a different account as normal.


Any ideas with this one?

Share this post

Link to post
Share on other sites
Skiver    1,777

I've seen this before and I believe this was the fix;


  1. Logon to the machine with a machine administrator account (assuming this issue is with a domain account, if not logon to the machine using another account with administrative privilege).
  2. Move the machine to a workgroup from domain. (If it was part of one workgroup then change it to another one or join a domain.) You could do this through Control Panel\System and Security\System and then Change Settings.
  3. Restart the machine and logon with a machine administrator account.
  4. Delete your user profile data (or move it a different location) completely from c:\users. "C" in my case is system directory but if you have a different one then use that one.
  5. Join the machine back to domain account (or to workgroup that the machine was originally joined to), and restart the machine.
  6. Logon with your domain account that you were having trouble with. Keep fingers crossed.
  7. If all goes well, you should be logged on.

Case select you will be logged on with a temporary user profile:

  1. Login with Administrator account on the local machine.
  2. Open Regedit.
  3. Navigate to HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
  4. There should be a multitude of Registry keys inside the ProfileList and search for two identical ones which are differentiated by the .bak extension (e.g. xxxxxx1234.bak & xxxxxx1234).
  5. The Registry key with the .bak extension contains the user's actual profile while the one without the .bak contains the Temp profile.
  6. Delete the Registry Key WITHOUT the .bak extension and rename the one with it to xxxxx1234 (without the .bak). Notice the fields on the right, there should be a value named RefCount, change the value to 0. 

Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.