Over 1 million tech questions and answers.

Major Network Logon Issues (8 Domain Controllers and 3.5 thousand workstations) DNS, Time Server, DHCP, and Group Policy Errors

Q: Major Network Logon Issues (8 Domain Controllers and 3.5 thousand workstations) DNS, Time Server, DHCP, and Group Policy Errors

I come to you again seeking help. We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ buildings around
campus. Almost every computer on campus has the problem that I will be describing. I have spent over two months peering over etl files from Windows Performance Analyzer (A great product) and hundreds of thousands of event logs. I come to you today humbled
that I could not figure this out. The problem as simply put our logon times are extremely long. An average first time logon is roughly 2-10 minutes depending on the software installed. All computers are Windows 7, the oldest computers being 5 years old. Startup
times on various computers range from good (1-2 minutes) to very bad (5-60). Our second time logons range from 30 seconds to 4 minutes. We have a gigabit connection between each computer on the network. We have 5 domain controllers which also double as our
DNS servers.
My original posts on:
Technet: http://social.technet.microsoft.com/Forums/en/w7itproperf/thread/e8400dbe-e6b8-4b1d-8851-a03e7af32e6e
Reddit: http://www.reddit.com/r/sysadmin/comments/w5f38/network_logon_issues_with_group_policy_and/
I followed a lot of what you all told me to do from testing the domain controllers with dcdiag and also completing netlogon tests. I did group policy tests where I got rid of the group policy
and just did default policy and it only slightly fixed the problem on some computers.

Below are a bunch of logs:
First being the netlogon.log file: http://pastebin.com/XKksB6ZA <!------ Lines that bother
me a lot: 07/31 13:41:45 [DNS] NlDnsHasDnsServers: DNS Server is NOT configured on this machine. 07/31 13:41:45 [MISC] NetpDcGetName: OURDOM cache is too old. 22206150 07/31 13:41:45 [CRITICAL] NetpDcPingListIp: OURDOM: Cannot LdapOpen ip address 192.168.36.213:
58 07/31 13:42:15 [SITE] DsrGetSiteName: Returning site name 'Campus' from local cache. LIKE 100 OF THESE
Second being the dcdiag log file: http://pastebin.com/KSXWWxaS <!------ If you require more
tests please ask.

KB?s that I have tested:
KB2459530 - Event ID 5719 and event ID 1129 may be logged when a non-Microsoft DHCP Relay Agent is used

KB2561285 - You experience a long domain logon time in Windows 7 or in Windows Server 2008 R2 after you deploy Group Policy preferences to the computer

KB2581608 - Logon scripts take a long time to run in Windows Vista, in Windows Server 2008, in Windows 7 or in Windows Server 2008 R2

KB2617858 - Unexpectedly slow startup or logon process in Windows Server 2008 R2 or in Windows 7

KB2510636 - An update that improves the startup performance of Windows 7 and of Windows Server 2008 R2 is available None of these tests have worked consistently over the entire system.

Problems noted:
Machines sometimes put up ?No logon servers available? even after sitting there for a set time period.

Machines sometimes lose their trust relationship with the domain and have to be unjoined and rejoined from the domain using the local admin account. User and machine accounts are sometimes mysteriously
locked from logging to the domain.
The LDAP call to connect and bind to Active Directory completed. DC3.ourdomain.edu The call completed in 9001 milliseconds. (Should this be taking 9 seconds????????)

Event Log Errors:
DHCP-Client 1002
Group Policy 1055 and 1129
DNS Client Events 1014 - Name resolution for the (name ourdomain.edu and computername) timed out after none of the configured DNS servers responded.
Application Virtualization Client 3130
NetBT 4300 and 4321- The name "OURDOM :1d" could not be registered on the interface with IP address 192.168.93.71. The computer with the IP address 192.168.93.60 did not allow the name to be
claimed by this computer.
Netlogon 5719
E1kexpress 27
Time Service 129 and 131
Bowser 8005 ? The browser has received a server announcement indicating that the computer WRKSTNAQ-WD is a master browser, but this computer is not a master browser.

Important Information and Edits:
Sites & Services could be correctly set up. I set up in DHCP Scope only one DC and it did not seem to speed anything up. I also set up a lmhost file on multiple computers once again not speeding
anything up and Kerberos over UDP is already disabled. IPv6 seems to be disabled on all machines, though I am not certain.
EDIT 1: ipconfig /all
Hostname: WRKSTNAQ-WD

Primary DNS Suffix: ourdomain.edu

Node Type: Hybrid IP

Routing Enabled: No WINS Proxy Enabled: No

DNS Suffix Search List: ourdomain.edu

DHCP Enabled: Yes

Autoconfiguration Enabled: Yes

IPv4 Address: xxx.xxx.93.71

Subnet Mask: 255.255.255.0

Default Gateway: xxx.xxx.93.1

DHCP Server: xxx.xxx.32.60

DNS Servers: xxx.xxx.37.94, xxx.xxx.37.212, xxx.xxx.37.95, xxx.xxx.36.213

NetBIOS over Tcpip: Enabled

EDIT 2: nltest /sc_query:ourdomain.edu

Flags: 30 HAS_IP HAS_TIMESERV

Trusted DC Name : \dc4.ourdomain.edu

Trusted DC Connection Status Status: 0 0x0 NERR_Success

The command completed successfully.

RELEVANCY SCORE 200
Preferred Solution: Major Network Logon Issues (8 Domain Controllers and 3.5 thousand workstations) DNS, Time Server, DHCP, and Group Policy Errors

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Major Network Logon Issues (8 Domain Controllers and 3.5 thousand workstations) DNS, Time Server, DHCP, and Group Policy Errors

Hi,


I would like to suggest using Network Monitor to troubleshoot the issue.


Thanks.

Jeremy Wu
TechNet Community Support

Read other 4 answers
RELEVANCY SCORE 130.8

I want to set all my domain controllers (DC and RDC) to pull time from time.windows.com. In order to achieve this I am planing to create a gp (Computer Configuration/Policies/Administrative Templates/System/Windows Time Service/Time Providers)and
link to Domain Controller OU.
My question is, is it the best thing to do, or is there any risk or best practices with respect to this.

Read other answers
RELEVANCY SCORE 110

I am gravely in need of your help and assistance.

We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ buildings around campus. Almost every computer on campus has the problem that I will be describing. I have spent over one month peering over etl files from Windows Performance Analyzer (A great product) and hundreds of thousands of event logs. I come to you today humbled that I could not figure this out.

The problem as simply put our logon times are extremely long. An average first time logon is roughly 2-10 minutes depending on the software installed. All computers are Windows 7, the oldest computers being 5 years old. Startup times on various computers range from good (1-2 minutes) to very bad (5-60). Our second time logons range from 30 seconds to 4 minutes.

We have a gigabit connection between each computer on the network. We have 5 domain controllers which also double as our DNS servers.

Initial testing led us to believe that this was a software problem. So I spent a few days testing machines only to find inconsistent results from the etl files from xperfview. Each subset of computers on campus had a different subset of software issues, none seeming to interfere with logon just startup.

So I started looking at our group policy and located some very interesting event IDís.

Group Policy 1129: The processing of Group Policy failed because of lack of network connectivity to a ... Read more

Read other answers
RELEVANCY SCORE 106.8

I have an SCCM Client deployed to several test PC. The client configures LGPO directing the PC to receive Windows Update from our SCCM server.  However, it fails. WUAHANDLER.LOG shows the following errors:
Enabling WUA Managed server policy to use server:http://xxxxx.xxx.net:8530
Waiting for 2 mins for Group Policy to notify of WUA polucy chnage...
Unable to read existing WUA resultant policy. Error = 0x80070002.
Group Policy settings were overwritten by a higher authority (domain controller) to: Server and Policy NOT CONFIGURED
Failed to Add Update Source for WUAgent of type (2) and id{{.......}}. Error=0x80040692.
I checked domain GPOs and there is no GPO that would cause this conflict.  I ran RSOP to verify.  What I noticed is that gpresult did not show LGPO as being applied. But when I unlinked all the domain GPOs (linked to the PC OU), gpresult showed
LGPO as being applied.
Any ideas or suggestions welcome.
 

A:Group Policy settings were overwritten by a higher authority (domain controller) to: Server and Policy NOT CONFIGURED

Hi,
 
For this issue, please try to refer to the following article;
 
Troubleshooting Group Policy Configuration for Software Updates
 
If this issue persists, for a better support service, please kindly post at the SCCM forum for further help:
 
System Center Configuration Manager Category
 
Alex ZhaoPlease remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Read other 4 answers
RELEVANCY SCORE 105.2

Hey,

All of our computers at work have Windows 7 Ultimate x64 and are connected through Server 2008. One computer, which I recently imaged and deployed, is having an issue connecting to network folders. The strange thing is that all networked drives are set for access through group policy. The computer in question is able to access allowed folders but, when I go to the main computer screen, instead of seeing Network on the left hand sidebar, I see Computers and Devices. Also, the machine will not allow anyone, even administrators, to map a network drive. The user also cannot access files from links in emails - i.e. drive:\folder\file. I'm wondering if there is some glitch in the policy or should I just re-image the machine. My boss wants to avoid the re-imaging but, even going through Network Troubleshooting, we can't seem to locate the problem.

A:Network access issues on Server 2008 with Windows 7 and group policy

Maybe there's something within the registry that's keeping the user from accessing?

Read other 1 answers
RELEVANCY SCORE 104

I recently purchased a new Windows 8.1 computer for use in our organization.  The default logon option for the device is for a Microsoft Account (the default username field prompt is for an e-mail address, rather than for a username.)  However,
I would prefer that the default logon option be for a Windows domain account logon, so that users don't have to click the "Sign-in options" link and select "Local or domain account password" each time they need to log onto the computer.
I have learned that setting the "Interactive logon:  Do not display last user name"
policy (located under Computer Configuration / Policies / Windows Settings / Security Settings / Local Policies / Security Options) to
Disabled allows the domain logon option to be retained across sessions.  However, I would prefer to keep this option set to Enabled so that the previous user name is not displayed.
Does anyone have any suggestions on how the default logon option can be forced to a domain logon, while still suppressing the display of the last username?

A:Windows 8.1 Group Policy to Force Domain Logon as Default?

Hi Arowitv,
According to your description, we can use the following policy to check the result.
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options:
Accounts: Block Microsoft accounts
Click this option, and select" Users can't add or log on with Microsoft account"
Note: Selecting this option might make it impossible for an existing administrator on this computer to log on and manage the system.
Computer Configuration\Administrative Templates\System\Logon :Assign default domain for logon
Set the option to Enabled, and add the Default Logon domain.
Hope this helps.
Regards,


Kelvin Xu
TechNet Community Support

Read other 4 answers
RELEVANCY SCORE 102

Running Server 2003 with AD. Lately I've been seeing errors in XP clients EVENT VIEWER. Errors are as follows:

Event ID: 1202 Source: SceCli
Security policies were propagated with warning. 0x4b8 : An extended error has occurred.
For best results in resolving this event, log on with a non-administrative account and search http://support.microsoft.com for "Troubleshooting Event 1202's".

Event ID: 1085 Source: Userenv
The Group Policy client-side extension Security failed to execute. Please look for any errors reported earlier by that extension.

I've tried all the MS solutions and have even gone as far as re-loading the default "compatibility" GP template on the server (making all options "Undefined"), then refreshing the policy on the clients with no success. The errors do not seem to be affecting usability at all on the network. Anyone else?
 

A:Group Policy errors on XP clients in Domain

What is your AD Config like, do you have trusts, have you tried to delete the user account and then recreate it. I found a MSKB article that describes your issue to the tee from what you described, here http://support.microsoft.com/default.aspx?scid=kb;en-us;324383

Hope this helps
 

Read other 3 answers
RELEVANCY SCORE 99.6

I also have had norton try to help download a the 360 version and after they took over my desk top I started having the logon problem as the admin. As I was looking through all the problems users have encountered with this I ran across a entry where some had found a free download that would fix the problems, but as luck would have it, before I could write it down my access failed and now I can not find it again. Does any one have that Link?

A:Group policy client server failed logon

Originally Posted by chuckcharrod


I also have had norton try to help download a the 360 version and after they took over my desk top I started having the logon problem as the admin. As I was looking through all the problems users have encountered with this I ran across a entry where some had found a free download that would fix the problems, but as luck would have it, before I could write it down my access failed and now I can not find it again. Does any one have that Link?



Am not able to get u. Is this is happening on clients of your domain. what is the exact error message, at which instant you are getting this..

Read other 3 answers
RELEVANCY SCORE 98.4

Hoping someone can help me!

All of a sudden I am unable to access my computer desktop due to the above error message.

I have an acer laptop which came pre installed with windows vista basic so I have no disc... It is a home computer so the only logon we use is the profile named 'aver valued customer' which doesn't require a password.

I can get as far as this icon but everytime I click it I get the above message. I have tried running in safe mode and have also tried system restore but keep getting back to this initial logon screen which doesn't work.


Can anyone please help??

A:Group policy server failed logon. Access is denied.

Welcome to the forum. when you get to the login page is there any option to login as another user often just an arrow next to the name or switch user it seems it thinks its on a domain and your trying to login to a domain that you dont have. Can you get to safe mode with a cmd prompt?

Read other 8 answers
RELEVANCY SCORE 90.8

i have a DC 2012 R2 and windows 7 pro workstations i need to have a policy for specific screen saver(pic with our company logo) , i tried many and many settings with no luck :
my policy is like the following :
User Configuration > Policies > Admin Templates > Control Panel > Personalization there
is an option for Force Specific Screensaver
any idea please ?


 

Read other answers
RELEVANCY SCORE 86

Hey guys searching searching searching but didnt found the asnwer.
The problem we have alot of users and since 2 months we have 40 pc running windows 7.
Most of them work perfect (after alot of coding) but we run into some problems.
Some pc`s dont run the computer startupscript, we made a policy to run the computer script but on some computers it doenst work.
All the pc are the same, have the same security groups.
We have another policy "Always wait for the network at computer startup and logon" and we have the policy "
Run startup scripts synchronously" 
So again everything works on most computers but some just don`t wait for the network, they skip the policy because the network isn`t ready yet?
Whats happening here?
Update: ok so i figured out that if i add a reg setting (or policy) that it works but i have to wait for 60 sec before the network/pc is ready, were all on the same network some people have no problems some do.
regsetting: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "GpNetworkStartTimeoutPolicyValue"=dword:00000019
regsetting: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters "DisableDHCPMediaSense"=dword:00000001
Its 60seconds right nog if i put it to 24 sec the startup computerscript isnt triggered! at 60  seconds it works!
So its odd that some pc have no problem and some have to wait for 60 seconds before everything works.....
Is there a retry... Read more

Read other answers
RELEVANCY SCORE 86

Hello, i was wondering if any of you could advise?

I'm wanting to convert our Windows 2000 & XP workstations from static IP addresses to DHCP. We have a DHCP server (Windows 2003) up and ready.

Is it possible to deploy DHCP to our workstations using Active Directory Group Policy, rather than going round each machine manually?

Any advice would be grateful. Thanks.
 

A:Possible to deploy DHCP via Group Policy?

Read other 6 answers
RELEVANCY SCORE 82

Is anyone here using Win7 Pro in a 2003 Functionality level Active Directory environment?

On multiple Windows 7 boxes, my laptop, and my desktop I ALWAYS get the error attached in the screenshot "Failed to connect to a windows service" when I log onto the Domain. I have looked at the event log and it is very, very vague. Most our IT users who have 7 just don't log onto the Domain at all, but i'd like to figure out what the issue is.

The Aero service also does not work when I log on, so i have the win2k look, and then after about 2 minutes the service starts again, by itself and all is well.

Any ideas??

A:Troubles with AD Domain / Group Policy?

Not exactly a "crashes and debugging" issue, but perhaps sufficiently interesting for this section of the forum

Can you please post the text of the event(s) which relate to this error using the "copy" button (to copy details to the clipboard) in the lower left-hand corner of the event details dialog.

Read other 6 answers
RELEVANCY SCORE 82

Hey guys, i just recently made a OU on our Domain Controller and added about 10 computers to it (computers, not users) and had a Startup script applyed to that OU through Group Policy, now this start up script works for all machines but one, which is our problem machine.. it won't apply the GPO. i did a gpupdate /force on it, restarted and still no-go.

If anyone can at least give me an idea of what the hells going on i'd greatly appreteate it.
 

A:Domain Group Policy Problem.

Read other 6 answers
RELEVANCY SCORE 82

I downloaded that 120 day eval copy of Windows 2003 a long time ago, but never used it. I've been wanting to check out the server-side of Active Directory, permissions, and whatnot, and plan to install it on Virtual PC later, and play with it.

My question is: Here at work they've got a few DCs, and computers with XP Pro. Permissions on the client computers are restricted based on Group Policy. I'd like to mess with the same stuff at home.

Basically, the question boils down to: I'd like to experiment with restricting groups and/or individual users with GPO, however, from what I can see, in the GP editor, it seems that there is only one Group Policy, which govens the entire computer, and all users regardless of their group.

I'd like to apply different restrictions, sort of like assigning one Group Policy to one user, and another Group Policy to an entire group, etc.

Any of you know where I can find information on this? I've definitely tried Google, and a few other search engines, but the sites that it turned up weren't really helpful at all.

Thanks in advance,

Lyc
 

Read other answers
RELEVANCY SCORE 81.6

Hi,

I wanted to use group policy, on a Windows 2003 domain, to deny certain security groups access to two PC's that are in a public place. I have tried adding the security groups to:

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment

But this seems to be having no effect. Am I going about this all wrong?

Many thanks
 

A:Deny logon with group policy

You need to create a new GPO object in Active Directory, not a local policy on the PC. You should be doing it the other way around, denying access to those two PC's in a public place so they cannot access the rest of your network. You should get a couple of tools to make this process easier. One is the Group Policy Management Console:
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
And another is the Group Policy Common scenarios. http://www.microsoft.com/downloads/...45-8aa6-4775-9208-c681a7043292&DisplayLang=en

There are templates for kiosk mode or high security that you can import directly into GPMC based on users or computers or both.
 

Read other 1 answers
RELEVANCY SCORE 81.2

Hi,


Not sure if this is the right place for this sort of question, but here goes.

My organisation includes approx 100 computers. A mix of 2000, XP, Vista and 7.

I installed WSUS on one of the servers, and all of the 2000/XP/7 systems reported in gracefully. However, there were 0 windows Vista systems in the WSUS console. Diagnosing this problem I went to a couple systems with Vista, and ran gpupdate /force on them. This is what I got back


Code:
Updating Policy... User Policy update has completed successfully. Computer Policy Update Failed. To diagnose the failure, review the event log or invoke gpmc.msc to access information about Group Policy results.
Checked the event log. Here's what's in it:


Code:
The processing of Group Policy failed. Windows attempted to read the file \\<FQDN>\sysvol\<FQDN>\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
I have verified that the UNC path "\\<FQDN>\sysvol\<FQDN>\Policies\{31B2F340-016D-11D2-945F-00C04FB9... Read more

A:Vista not getting Group Policy in Domain environment

Hi,

Check the Vista PC's Windows features to see if the service is active.

Read other 1 answers
RELEVANCY SCORE 80.8

My Group Policy logon/logoff scripts aren't being run.

I have an Active Directory object with a group and user both located in it. I've joined the user to the group and applied some group policies to the object already that work just fine, so I know my structure is setup properly.

Now I try to add logon and logoff scripts. For troubleshooting sake, I went ahead and put both scripts on a network share and even referenced them in group policy through the network share instead of the server's local drives. The scripts have read/execute permissions for the group that this Group Policy is applied to. I have even gone as far as logging onto another computer with the user that this is supposed to apply to and manually running the scripts. They both work. I've added these scripts under User Configuration/Windows Settings/Scripts (Logon/Logoff) when editing the group policy from Active Directory.

They're not executing when I log on to a domain computer with this user.
 

A:Group Policy Logon/Logoff Scripts

Read other 16 answers
RELEVANCY SCORE 80.8

Hello

I'm typing this message from my old laptop not the computer (sony Vaio) which has the problem.

I wondered if anyone could help me.

My operating system is Windows Vista Home Premium.


When I turn on my computer on the screen I get the message :

'The Group Policy Service failed the logon. Access is denied'.

There is a Sony icon in the middle of the screen. That is the only thing on the screen. When I click that I get the error message above. I thne press the ok button and I go to another screen with only one button.

The is button on the screen is one which offers the options of (in dropdown menu format :

Restart
Hibernate
Sleep
Shutdown


Can anyone suggest how I can get into my computer as there seems no logical way (to my mind) to get into my computer again.

Thanks in advance for your assistance.

Regards

Tony

Read other answers
RELEVANCY SCORE 80.8

hi everyone

i have tried to log on to a standard account on my computer and it said that group policy client failed to log on

so i went to check if the service is on but it is off and i can not turn it back on.

please help me find a way to get it working again
 

A:Group Policy Client failed to logon

See if you can start it with the firewall turned off and try adding it to the firewall exceptions.
 

Read other 3 answers
RELEVANCY SCORE 80.8

Hi,
I have a Windows Server 2012 R2 Standard Edition and Workstations running Windows 8.1. I want group policy to deploy a bat file to RunOnce through Registry and only the first time the user logs on.
I have ticked the box on the properties saying "Run once and only run once" but it doesn't seem to deploy. What i am trying to deploy is a Windows 8.1 Start Menu File so that the user has the start menu that I wish they to have but they
can also edit it and it doesn't keep replacing with the one I want.

I am open to answering any more questions or post pictures of my batch, group policy and registry.

Thanks in Advance,
~ Zac

A:RunOnce deploy via Group Policy only on first logon

Hi
When you mean start menu, do you mean start screen? As I know, there is only one option to deploy a customized Start screen layout to users in a domain and prevent edit from users.
Customize Windows 8.1 Start Screens by Using Group Policy
https://technet.microsoft.com/en-us/library/dn467928.aspx?f=255&MSPPError=-2147217396
Note: Start screen control is supported in the Windows 8.1 Enterprise operating system, the Windows RT 8.1 operating system with side loading enabled, and in all editions of the Windows Server 2012 R2 operating system. Start screen control is not supported
in the Windows 8.1 Pro operating system and the Windows 8.1 operating system.
For Runonce script, keep eyes on the permission of users, if your script was running by using user account but your users has no permission to run these command, it causes failure.
Regards,
D. WuPlease remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]microsoft.com.

Read other 3 answers
RELEVANCY SCORE 80.8

Hi All,
A bit of a generic question here as I don't have much to go on, but over the last month or two so we've started seeing more and more users seeing the "Group Policy Service Failed the Logon" error who then can't log onto the PC. We use roaming profiles
too, so once they see that error it seems to then corrupt their roaming profile stopping them from logging on anywhere.
Other users can log onto the PCs without issue.
We've been seeing the problem occasionally since moving to Windows 7 years ago, but there seems to have been a sudden spike.
We're Windows 7 SP1, patched with the latest updates...
Thanks

Read other answers
RELEVANCY SCORE 80.8

Can anyone please help me fix this? When I attempt to logon I get the following message: "The Group Policy Client Failed The Logon."

(The only way I can logon is to hit the F8 key and go to "Last Known Good Configuration.")

Every solution I search for seems to believe this is ONLY a problem for systems with multiple USER ACCOUNTS.

I have this problem and I have only one User Account on my computer.

The Guest Account is OFF. There has never been a Guest Account set up. I am the Administrator. I even tried turning the User Account Control to OFF but it didn't make any difference.

Can anyone offer a fix? Any help is greatly appreciated.

A:The Group Policy Client Failed The Logon

Hello Macmets, and welcome to Vista Forums.

You might see if doing a System Restore at boot using a restore point dated before this error may be able to fix it for you.

Hope this helps,
Shawn

Read other 5 answers
RELEVANCY SCORE 80.4

Hi,

I'm not sure where to post this as it's not really a network issue due to the computers not being domained.

At the moment I am applying local group policy settings for each computer (many computers) manually on each machine (Taking about 20 minutes per machine due to the MANY settings that need checking).

Is there any way I can cut this time down by saving a set of policy options from one computer and applying that set to multiple other computers (via a usb stick etc?)

Thanks in advance,

Jack

A:Automating Local Group Policy on non-domain machines?

Hi and welcome to TSF not quite sure but you may find something here Group Policy management for IT pros

Read other 13 answers
RELEVANCY SCORE 80.4

I don't know why but some of the machines don't apply the group policy from my Windows 2000 Server Domain Controller. I have Windows XP Pro SP2 Clients joined to the domain that run the policy just fine and a certain number that all just don't apply either my policy or the default domain policy.

At first I thought it could be the user was in the deny list because of group association, but then I logged into a computer that I knew applied the policy and everything worked just fine. I tried logging in as one of the users I knew worked on a machine that didn't apply the policy and the policy was not applied.

To make things clear the problem must be with the computer configuration itself and not a problem with the user account.

I have spent some time googling my problem and some things said to make exceptions for certain ports in my firewall, but that didn't help any either (I turned the firewall off completely and still nothing).

If you have any suggestions as to things to look at that may help that would be greatly appreciated.
 

A:Some XP Clients don't accept group policy from Domain Controller

I couldn't get any PC's to "take notice" of the group policy on the Server! I tried searching the web and went through instructions websites given...still no luck months on!
 

Read other 1 answers
RELEVANCY SCORE 80

Hello everyone !
Im using win 7 professional x64!
i was stupid deleted some files like ( ntuser.dat ... ) in C:\User\Username folder
And now , i can not log in to my desktop screen.
I took most 7hrs to searched and tried tried tried , but i did not work.
1. I can not create New Profile when logged into "safe mode"
2. I do not have any restore points create.
3. I purchased window 7 by online and just download and upgraded from win XP , so i can not repair by that way.
How do i do now , so regret when deleted those files.
How can i get it back ? Can i download or copy those files from another PC?
Please help me this step by step please ! thank you everyone.

A:The group policy client service failed the logon

Boot into safe mode, and enable the hidden administrator account ... then reboot and logon using the administrator account and create a new user account ...

Built-in Administrator Account - Enable or Disable

Read other 7 answers
RELEVANCY SCORE 80

I stupidly deleted C:\Users\MyName\ntuser.dat. Now when I try to log on to my account, I get the message "The Group Policy Client service failed the logon." I am now logged on to my Administrator account to post this message. All of my files that I use daily are in the MyName account. I deperately need to be able to access the MyName account. How can I restore the ntuser.dat file?

After posting this, I checked C:\Users\MyName\ntuser.dat and saw that it is now listed after I rebooted the computer, but I still cannot login to my account.

A:The Group Policy Client service failed the logon

Hi,

I know this is not the answer you want to hear, but what I would recommend doing is creating a new account and copying all your data across. The ntuser.dat file holds the entire "Hkey_Current_User" hive for that user. Your documents will not be damaged, but recovery of that file will be difficult. If you have any problems with restoring your data, such as Outlook files, then just reply back.

If you do want to attempt recovery, see if you can undelete the file using Recuva then copy it back: Recuva - Download If you have any Shadow hard disk copies or backups of this file, then import them now. Else try System Restore, it may just do the trick. If you have to resort to Recuva, then your chances of succes are almost nil.

Richard

Read other 6 answers
RELEVANCY SCORE 80

I am using Windows Vista Business Service Pack 2 and having this error while I try to login to my account. 
 
"Group Policy Client service failed the logon. Access is denied".
 
Earlier on I had only one account (Admin only) but after having this error I was unable to login to my account. I searched on internet and found the one solution to access the affected account in safe mode (to copy the useful data) and make new account.
 
After continously using the new account for some time (without shutting down my laptop) if I log off from newer account and then login to my old account. I dont get the Group Policy .... error and get logged in to my old account. But the problem is if I shutdown I get the same error and have to repeat the cycle by using the new account for some time and then try to login to older one.
 
With the new account I am unable to access data from old account and also some of the data in another drive. Is there any permanent solution to this issue without reinstalling the windows.

A:Group Policy Client service failed the logon

Hi jackhero,
 
Login to old account and use Windows Repair (All In One) utility to reset registry permissions and reset file permissions.

Read other 8 answers
RELEVANCY SCORE 80

I am using Vista Business SP2. Two days ago when I restarted my laptop I received the following message while trying to login to my account,
 
"The Group Policy Client service failed the logon, Access is denied"
 
Because of this problem I am locked out of my account and cant get in at all.
 
I am not sure when did this problem started because usually I put my laptop to sleep while I am not using it. I faced this problem when I restarted. I only had one user account as admin in windows.
 
I searched for this problem and found that I could try to login via safe mode. I tried and I am able to login to the same account in safe mode. As suggested in search some people said you could try making another account of admin. Maybe it happened because of the profile getting corrupt. Some people said you could modify ntuser.dat file of the affected account. But I could not find that file, although I could see files (two of them) with same name in new account ntuser.datLog1 and ntuser.datLog2.
 
I cant access my old profile through the new one. 
 
I would like to ask that is there any possible way to recover my old account along with its data?

A:Group Policy Client service failed the logon

If you can login via safe mode you should be able to create a new user account and transfer the data from the corrupted profile.
 
Open a command prompt in Safe Mode and type
 
net user administrator /active:yes
 
This will enable the hidden administrator account. Reboot the computer and in the Administrator Account create a new admin user. Transfer the data then disable the Administrator account in an elevated command prompt by typing
 
net user administrator /active:no
 
https://www.howtogeek.com/howto/windows-vista/enable-the-hidden-administrator-account-on-windows-vista/

Read other 5 answers
RELEVANCY SCORE 80

Access is denied

Can anyone help with this

I have been into the reg to see if the is a .bak to one of the profiles in Profilelist, but there isn't

I have made a new user to access the machine, and Also Safe Mode can access the faulty account, but not in normal mode

Thanks
 

Read other answers
RELEVANCY SCORE 80

This pc is workgroup-based, and both active accounts on it are getting this message.  There are two other accounts, but nobody knows the passwords for them.  So I am totally unable to log in.

When I boot into Safe Mode, as soon as I log in I get logged out.
Booting into Last Known Good doesn't work either.
Does anybody have any suggestions?  At the very least, I need to get the data off of this computer.

Thank you in advance,
Mike

Read other answers
RELEVANCY SCORE 80

Access is denied

Can anyone help with this on Win 7

I have been into the reg to see if the is a .bak to one of the profiles in Profilelist, but there isn't

I have made a new user to access the machine, and Also Safe Mode can access the faulty account, but not in normal mode

Thanks

A:The Group Policy Client Service Failed the Logon

Is your computer a standalone machine, or is it joined to a domain? Try to rename your affected user profile folder in c:\users, and then log in with the affected account. I hope this will work.

Read other 1 answers
RELEVANCY SCORE 80

Help....as admin I can sign on but local user get this error message instead. Also now, every program I try to launch google.com, yahoo.com, amazon.com, windows explorer.com.....ALL say "is not responding"...then if you wait 10-15 minutes the initial program will show up, like my home page, then if I select another page to go to, I get the same is not responding message. So tired of this. Called HP they said call my ISP, call them they said call my cable provider, they said sorry don't know the problem....now I contact you for help. Someone out there has to know how to fix this laptop.
HP Notebook, windows 8.1 64bit
thx
 

A:group policy client service failed at logon win 8,1

I found a page which appears to answer your problem. Have a look and see if it helps.
group policy client service failed at logon win 8,1
 

Read other 2 answers
RELEVANCY SCORE 80

I turned on my computer and I saw this, I searched up the internet for fixes and I haven't found anything, I tried doing a fix from Windows 8/10 which is press Windows Key and R and nothing even came up, please help I keep a lot of my art on that PC.

Sent from my ASUS_X008D using Tapatalk
 

Read other answers
RELEVANCY SCORE 80

One of my user accounts have been getting the error above after a shutdown.
I tried system restore but it did not work.
I have tried disabling non-windows service on startup and that didn't work
Can someone help me please!!

A:The Group Policy failed the logon. Access Denied

Here are instructions on how to fix it, or at least, how I fixed a computer at school once.

1. Logon to the machine with a machine administrator account (assuming this issue is with a domain account, if not logon to the machine using another account with administrative privilege).
2. Move the machine to a workgroup from domain. (If it was part of one workgroup then change it to another one or join a domain.) You could do this through Control Panel\System and Security\System and then Change Settings.
3. Restart the machine and logon with a machine administrator account.
4. Delete your user profile data (or move it a different location) completely from c:\users. "C" in my case is system directory but if you have a different one then use that one.
5. Join the machine back to domain account (or to workgroup that the machine was originally joined to), and restart the machine.
6. Logon with your domain account that you were having trouble with. Keep fingers crossed.
If all goes well, you should be logged on.

Read other 9 answers
RELEVANCY SCORE 80

1 Computer in 2003 R2 domain is giving the "Windows cannot connect to Group Policy Client Service" error upon logon of local admin and domain admins.  Cannot get group policy to update gpupdate /force = user update failed & computer update failed.
 Gpresult /r = access denied.  I have tried restarting service, disabling anti-virus, uninstalling anti-virus, sfc /scannow, checked DNS on servers, configured alternate static IP on client, still nothing.  Have not tried re-attaching to domain
yet.  Other services are working that require connection to servers such as AD replication, WSUS updating, SEPM 12 updating.  Have seen similar issues on sites but most answers relate to DNS issue, I have not had any problems with any other similar
clients and DNS in this domain.  Any ideas would be appreciated! 

Read other answers
RELEVANCY SCORE 80

Hi! I still can't login to my user account.
I've tried every solution I found all over the web (regedit gpsvc etc)
Please help.
Please see the error message every time I attempt to log in.

A:Group Policy Client Service Failed The Logon

Hi marieneregalado,
This issue might be caused by corrupted user profile.
You could boot into Windows Recovery Environment and rename the folder of your user profile under c:\users.
Also kindly follow the steps as mentioned in the link
http://blogs.msdn.com/b/moiqubal/archive/2012/03/04/how-to-fix-quot-the-group-policy-client-service-failed-the-logon-access-denied-quot-error.aspx
Regards
D. Wu

Read other 2 answers
RELEVANCY SCORE 79.6

i cant Using group policy to copy file to windows10 user's on the domain,but everything is ok in windows 7 user's  and the folder copied in all windows7 machines, 

- iam using this script on Windows server 2008

md  c:\COMPANY 

xcopy \\WIN-5PKBDU5IFVH\testfolder   c:\COMPANY /e /i

can you help me solving this problem with all
windows 10 user's???

thank you 

Read other answers
RELEVANCY SCORE 79.6

Whenever I log in to windows 7 using my test AD account I only see 3 icons inside control panel.... When I log in to XP using the same AD account I see all the control panel icons that Im supposed to see according to my GP settings. So it looks like my GP is NOT working properly for windows 7 machines any ideas on what I can do to fix this issue?

A:Domain Group Policy 2003 environment & Windows 7 clients

Could it be the admin of Active Directory has set a group policy for Win 7 users that limits what is available in the Control Panel? They may not be administering XP the same way.

**EDIT** I just realized you are probably the network admin. Duh...

Read other 2 answers
RELEVANCY SCORE 79.6

Hi,
I have a laptop with all the latest updates installed. Legally licensed Windows 7 Home Premium 32bit ed. Running Avast anti virus.
Last thing I did was install a single windows update, I don't remember the update's number, but I remember the download size was less than 2Mb. I don't think the update has anything to do with this.. After successfully installing and rebooting, the laptop boots up normally and I get to the logon screen. After I enter my password I get the following error::
the group policy client service failed the logon access is denied
​ Most of the posts I've found online are for computers part of a domain. For independent machines, the common advice is to logon with another user, which I don't have. What I've tried so far ::
boot to repair mode and create another user and add to users group via command prompt >> user still not showing on logon screen
boot to repair mode and create another user with administrator rights via command prompt >> user still not showing on logon screen
Boot to repair mode and scanning hard drive >> clean Repair startup 3 consecutive times >> same error message boot to safe mode >> same problem
Then I narrowed down the problem ::
boot to repair mode and run regedit. The registry key

Code:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\gpsvc key data
has the value

Code:
%windir%\system32\svchost.exe -k netsvcs instead of GPSvcGroup

Reboot,... Read more

A:group policy client service failed non-domain laptop

Read other 7 answers
RELEVANCY SCORE 78.8

My PC got infected with a w32.virut virus.. so after searchin for a solution.. i had ir removed using symantec virut removal tool.. run the tool while my PC is at safe mode and internet off... And when its all done and restarted my pc at normal mode.. My PC keeps turning off and when i get back on and login to Admintrator acct, i keep getting this.. The Group Policy logon is denied.. The media is write protected Hope someone out here can help me out.. Thanks in advance and more power!!! xoxo

A:Help me plz - Group Policy logon is denied.. The media is write protected

I've sent a message to our security and malware removal specialist asking her to take a look at your problem and see if she has any suggestions. Unfortunately, though she was here when i started the message, she had logged off before I sent it so it may be a while before she responds. In the meantime, try the following:

Do you know when this problem began? Try a System Restore to a point in time BEFORE the problem began. Here's the procedure: http://www.vistax64.com/tutorials/76905-system-restore-how.html. Be sure to check the box to show more than 5 days of restore points. If the first attempt fails, then try an earlier point or two. NOTE: You will have to re-install any software and updates you installed between now and the restore point, but you can use Windows Update for the updates. Use the recovery disk if the system prompt doesn’t work. The recovery disk works a bit different from the above procedures but if you follow the prompts from the System Restore menu option with the above information you should be able to restore with no problems. This may restore the virus as well, so it may need to be removed again, but I would hold off on the procedure you used before as it seems it caused a lot of problems. Let's let our expert advise you what to do if we can at least restore you to working condition but even if we get it working again, I'd try to avoid using it as much as possible - especially going on the internet - as using it may spread the infection (but you c... Read more

Read other 4 answers
RELEVANCY SCORE 78.8

I cannot open my computer, I get this message. It is a personal computer and I am the only user so i can't log on with an administrator account. I can press f8 to get to that screen, but don't know what to do after that. I found Pianiste on one of the
forums who had the same issue about a year ago but could not see if she was able to solve this problem. The person who sold me the computer set it up so that I would not need a password. It is Windows 7. Would appreciate it if anyone can help me with this.
Thanks in advance. sorry if this is the wrong forum, can't see which one would be better.

Read other answers
RELEVANCY SCORE 78.8

Now what?
Tried system restore, again. At least once a week now.
The real question is WHY!!!??? Why at all? Why all the time. Vista has been the MOST frustrating operating system we have owned. Almost 20 years with computers, and I can't believe I keep buying Microsoft. OMFG....
At least once a week we have issues. Compatibility, profiles deleted, uploaded files just gone for no reason, login failed. Our frustration has finally peaked.
How do we get this POS working again?

A:The group policy client failed the logon. Access is denied?

Hello FedUpVistaSucks,
Can you provide some system specs, thanks.
Do you have a Vista DVD/CD ?.
Can you get in via safe mode ?.
When we get a bit more info, we can get into it.

Read other 1 answers
RELEVANCY SCORE 78.8

Ok, so I have been searching google for an easy walk through on how to block sites such as MySpace, Youtube, Facebook and other related sites where my father's employees like to waste company time on. **HOWEVER** After reading, blocking sites through IE's block list and adding domains with IP's seem to have easy work arounds compared to IPSEC/Group Policy.

This route allows for all of xxxxx.myspace.com's (subnets) from being accessed as apposed to finding them all out and entering the domain/subnet combos individually in the host file. So if ANYONE has seen a very easy walkthrough (cause the ones i have seen are win 2000 and/or are vague and more complicated than required, I would greatly appreciate it.

I am going to continue to search the web, and if I find something i'll post just in case this topic benefits others. I'm determined to solve this issue!!!

Take Care!
FP2
 

A:Blocking websites either by IP or Domain with Group Policy / IPSEC (not host file)

Read other 12 answers
RELEVANCY SCORE 78

I only have one account on my computer and its my administrative account. When i try to log on this message pops up and it: Group Policy Client Service Failed the logon Access Denied and then it logs me out i cant even enter my computer

I would really appretiated if someone could tell me how to fix it without having to send in my computer for repair and paying 200 something dollars.

Thanks for the help

A:Group Policy Client Service Failed the logon Access Denied

When did this problem begin?
You can try a system restore thru WIN RE.

Read other 5 answers
RELEVANCY SCORE 78

i'm facing one issue with the roaming profile, when i'm trying to login on all machines (7 machines about) i receive  this error message ''
The Group Policy Client service failed the logon. Access denied.

your help please.

Read other answers