Over 1 million tech questions and answers.

Network Logon Issues with Group Policy and Network

Q: Network Logon Issues with Group Policy and Network

I am gravely in need of your help and assistance.

We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ buildings around campus. Almost every computer on campus has the problem that I will be describing. I have spent over one month peering over etl files from Windows Performance Analyzer (A great product) and hundreds of thousands of event logs. I come to you today humbled that I could not figure this out.

The problem as simply put our logon times are extremely long. An average first time logon is roughly 2-10 minutes depending on the software installed. All computers are Windows 7, the oldest computers being 5 years old. Startup times on various computers range from good (1-2 minutes) to very bad (5-60). Our second time logons range from 30 seconds to 4 minutes.

We have a gigabit connection between each computer on the network. We have 5 domain controllers which also double as our DNS servers.

Initial testing led us to believe that this was a software problem. So I spent a few days testing machines only to find inconsistent results from the etl files from xperfview. Each subset of computers on campus had a different subset of software issues, none seeming to interfere with logon just startup.

So I started looking at our group policy and located some very interesting event ID’s.

Group Policy 1129: The processing of Group Policy failed because of lack of network connectivity to a domain controller.

Group Policy 1055: The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: a) Name Resolution failure on the current domain controller. b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).

NETLOGON 5719 : This computer was not able to set up a secure session with a domain controller in domain OURDOMAIN due to the following: There are currently no logon servers available to service the logon request. This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.
E1kexpress 27: Intelฎ82567LM-3 Gigabit Network Connection – Network link is disconnected.

NetBT 4300 – The driver could not be created.

WMI 10 - Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

More or less with timestamps it becomes apparent that the network maybe the issue.

1:25:57 - Group Policy is trying to discover the domain controller information

1:25:57 - The network link has been disconnected

1:25:58 - The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has successfully processed. If you do not see a success message for several hours, then contact your administrator.

1:25:58 - Making LDAP calls to connect and bind to active directory. DC1.ourdomain.edu

1:25:58 - Call failed after 0 milliseconds.

1:25:58 - Forcing rediscovery of domain controller details.

1:25:58 - Group policy failed to discover the domain controller in 1030 milliseconds

1:25:58 - Periodic policy processing failed for computer OURDOMAIN\%name%$ in 1 seconds.

1:25:59 - A network link has been established at 1Gbps at full duplex

1:26:00 - The network link has been disconnected

1:26:02 - NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and DOUBLE THE REATTEMPT INTERVAL thereafter.

1:26:05 - A network link has been established at 1Gbps at full duplex

1:26:08 - Name resolution for the name %Name% timed out after none of the configured DNS servers responded.

1:26:10 – The TCP/IP NetBIOS Helper service entered the running state.

1:26:11 - The time provider NtpClient is currently receiving valid time data at dc4.ourdomain.edu

1:26:14 – User Logon Notification for Customer Experience Improvement Program

1:26:15 - Group Policy received the notification Logon from Winlogon for session 1.

1:26:15 - Making LDAP calls to connect and bind to Active Directory. dc4.ourdomain.edu

1:26:18 - The LDAP call to connect and bind to Active Directory completed. dc4. ourdomain.edu. The call completed in 2309 milliseconds.

1:26:18 - Group Policy successfully discovered the Domain Controller in 2918 milliseconds.

1:26:18 - Computer details: Computer role : 2 Network name : (Blank)

1:26:18 - The LDAP call to connect and bind to Active Directory completed. dc4.ourdomain.edu. The call completed in 2309 milliseconds.

1:26:18 - Group Policy successfully discovered the Domain Controller in 2918 milliseconds.

1:26:19 - The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.

1:26:46 - The Network Connections service entered the running state.

1:27:10 – Retrieved account information

1:27:10 – The system call to get account information completed.

1:27:10 - Starting policy processing due to network state change for computer OURDOMAIN\%name%$

1:27:10 – Network state change detected

1:27:10 - Making system call to get account information.

1:27:11 - Making LDAP calls to connect and bind to Active Directory. dc4.ourdomain.edu

1:27:13 - Computer details: Computer role : 2 Network name : ourdomain.edu (Now not blank)

1:27:13 - Group Policy successfully discovered the Domain Controller in 2886 milliseconds.

1:27:13 - The LDAP call to connect and bind to Active Directory completed.
dc4.ourdomain.edu The call completed in 2371 milliseconds.

1:27:15 - Estimated network bandwidth on one of the connections: 0 kbps.

1:27:15 - Estimated network bandwidth on one of the connections: 8545 kbps.

1:27:15 - A fast link was detected. The Estimated bandwidth is 8545 kbps. The slow link threshold is 500 kbps.

1:27:17 – Powershell - Engine state is changed from Available to Stopped.

1:27:20 - Completed Group Policy Local Users and Groups Extension Processing in 4539 milliseconds.

1:27:25 - Completed Group Policy Scheduled Tasks Extension Processing in 5210 milliseconds.

1:27:27 - Completed Group Policy Registry Extension Processing in 1529 milliseconds.

1:27:27 - Completed policy processing due to network state change for computer OURDOMAIN\%name%$ in 16 seconds.

1:27:27 – The Group Policy settings for the computer were processed successfully. There were no changes detected since the last successful processing of Group Policy.

Any help would be appreciated. Please ask for any relevant information and it will be provided as soon as possible.

** All the domain controllers are all integrated DNS and all have active directory.
** We have 5 very good domain controllers. Though we have over 10,000 users and 3,000 workstations.
** We have a gigabit network connections to the desktops and our mac's do not exhibit this problem.

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Network Logon Issues with Group Policy and Network

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

RELEVANCY SCORE 118.8

I come to you again seeking help. We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ buildings around
campus. Almost every computer on campus has the problem that I will be describing. I have spent over two months peering over etl files from Windows Performance Analyzer (A great product) and hundreds of thousands of event logs. I come to you today humbled
that I could not figure this out. The problem as simply put our logon times are extremely long. An average first time logon is roughly 2-10 minutes depending on the software installed. All computers are Windows 7, the oldest computers being 5 years old. Startup
times on various computers range from good (1-2 minutes) to very bad (5-60). Our second time logons range from 30 seconds to 4 minutes. We have a gigabit connection between each computer on the network. We have 5 domain controllers which also double as our
DNS servers.
My original posts on:
Technet: http://social.technet.microsoft.com/Forums/en/w7itproperf/thread/e8400dbe-e6b8-4b1d-8851-a03e7af32e6e
Reddit: http://www.reddit.com/r/sysadmin/comments/w5f38/network_logon_issues_with_group_policy_and/
I followed a lot of what you all told me to do from testing the domain controllers with dcdiag and also completing netlogon tests. I did group policy tests where I got rid of the group policy
and just did default policy and it only slightly fixed the prob... Read more

A:Major Network Logon Issues (8 Domain Controllers and 3.5 thousand workstations) DNS, Time Server, DHCP, and Group Policy Errors

Hi,


I would like to suggest using Network Monitor to troubleshoot the issue.


Thanks.

Jeremy Wu
TechNet Community Support

Read other 4 answers
RELEVANCY SCORE 101.6

Hey,

All of our computers at work have Windows 7 Ultimate x64 and are connected through Server 2008. One computer, which I recently imaged and deployed, is having an issue connecting to network folders. The strange thing is that all networked drives are set for access through group policy. The computer in question is able to access allowed folders but, when I go to the main computer screen, instead of seeing Network on the left hand sidebar, I see Computers and Devices. Also, the machine will not allow anyone, even administrators, to map a network drive. The user also cannot access files from links in emails - i.e. drive:\folder\file. I'm wondering if there is some glitch in the policy or should I just re-image the machine. My boss wants to avoid the re-imaging but, even going through Network Troubleshooting, we can't seem to locate the problem.

A:Network access issues on Server 2008 with Windows 7 and group policy

Maybe there's something within the registry that's keeping the user from accessing?

Read other 1 answers
RELEVANCY SCORE 100.4

Hey guys searching searching searching but didnt found the asnwer.
The problem we have alot of users and since 2 months we have 40 pc running windows 7.
Most of them work perfect (after alot of coding) but we run into some problems.
Some pc`s dont run the computer startupscript, we made a policy to run the computer script but on some computers it doenst work.
All the pc are the same, have the same security groups.
We have another policy "Always wait for the network at computer startup and logon" and we have the policy "
Run startup scripts synchronously" 
So again everything works on most computers but some just don`t wait for the network, they skip the policy because the network isn`t ready yet?
Whats happening here?
Update: ok so i figured out that if i add a reg setting (or policy) that it works but i have to wait for 60 sec before the network/pc is ready, were all on the same network some people have no problems some do.
regsetting: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "GpNetworkStartTimeoutPolicyValue"=dword:00000019
regsetting: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters "DisableDHCPMediaSense"=dword:00000001
Its 60seconds right nog if i put it to 24 sec the startup computerscript isnt triggered! at 60  seconds it works!
So its odd that some pc have no problem and some have to wait for 60 seconds before everything works.....
Is there a retry... Read more

Read other answers
RELEVANCY SCORE 88.8

I posted this problem in XP yesterday "Group Policy settings in XP Home - how to stop it!" and I will say I have been VERY impressed with the great help. Thanks so much.

BMR777 - Brandon Rusnak replied that it must be Malware since I bought this PC new from BestBuy and PC has never been used anywhere but by me in my home. I just started trying to network after I have had it 1 1/2 years and I can "see" my other PC's from this one and access shared folders but when I try to reach this one from those PCs (and the printer is attached to this one) I get a message that says "PC is not accessable. You might not have permission to use this resource. Contact the administrator" etc. I have never set any passwords or extra admin security so I started looking around on the web and found info on this "GROUP POLICY" setting in the firewall that makes me think this is the problem. It is also keeping Windows Firewall on and grayed out (so I can't turn it off). Above that tab it says "For your security, some settings are controlled by Group Policy "

So I have ran through the 5 steps and here is the log. I am only including the log as instructed but I saved that scan log I did in step 2, Is that needed at some point? I think it had 30 spywares listed.
Thanks,

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
-------------------------------------------------------... Read more

A:can't network to this PC & Group Policy keeps firewall on

I think I screwed up and this is what I was to post and attach the extra. Sorry.

Deckard's System Scanner v20071014.68
Run by Owner on 2008-01-09 23:45:01
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
71: 2008-01-10 04:45:07 UTC - RP661 - Deckard's System Scanner Restore Point
70: 2008-01-10 04:29:42 UTC - RP660 - Software Distribution Service 3.0
69: 2008-01-10 04:15:33 UTC - RP659 - Software Distribution Service 3.0
68: 2008-01-10 04:07:55 UTC - RP658 - Software Distribution Service 3.0
67: 2008-01-09 03:14:27 UTC - RP657 - Software Distribution Service 3.0


-- First Restore Point --
1: 2007-10-12 14:26:25 UTC - RP591 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Owner.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:47:45 PM, on 1/9/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.... Read more

Read other 5 answers
RELEVANCY SCORE 88

I am at my wits end. I have two computers, both WIN XP Pro SP3 connected using CAT 5 to a router with a cable internet connection. Somehow, one of my computers seems to think it is controlled by a group policy. Specifically, when I >control panel>internet options and click the security tab, it displays a message that "some settings are controlled by your systems administrator" and I cannot change them.

I am logged on as the sys admin, but the way I understand group policies it that they are controlled by some version of server and I have no such computer on my network.

The other things driving me nuts is when I use my network places, one computer show everything being on the local network while the other computer show the router and printer as local, but itself and the other computer being on the internet.

Any ideas why this is the case or how I can disable the group policies on the one machine?

Any help would be greatly appreciated.

donb
 

A:Solved: How did I get a group policy on my home network?

Read other 11 answers
RELEVANCY SCORE 88

Hi !

Windows 7 group policy

I've read a lot of post on this topic but haven't been able to find a clear answer to this question.

Is it possible to create different policies on a local machine and somehow assign these policies to the groups logging in on this machine ? Seems to me that changing the group ploicy affects all users.

The machine is not on a network. It is a computer for test purposes in the field not having a domain server to handle the group policies.

Kind regards

A:Group policy on local machine not on network

  
Quote: Originally Posted by kahr


Hi !

Windows 7 group policy

I've read a lot of post on this topic but haven't been able to find a clear answer to this question.

Is it possible to create different policies on a local machine and somehow assign these policies to the groups logging in on this machine ? Seems to me that changing the group ploicy affects all users.

The machine is not on a network. It is a computer for test purposes in the field not having a domain server to handle the group policies.

Kind regards



Gpedit does change group policies, and all users in that group are affected. I am a little confused as to what you want to do to the users.

Read other 4 answers
RELEVANCY SCORE 88

Hey all, stuck against a bit of a wall, here. I have a bunch of vista computers and I need them to automatically map a network drive whenever the user logs in.

In the past, we've used a login script and a .bat file to create the shares. But we're getting ready to switch over to vista, but the login script doesn't work under vista.

I've heard that its better to use Group Policy for this, but I cannot figure out how to do it using LOCAL GROUP POLICY. I've found about 100 or so guides for doing it using active directory/serverside things, but we're not on active directory, so that's not an option.

I'm sure there is a policy somewhere, can anyone direct me to it?

A:Local Group Policy to map a network drive?

When you map a drive on the workstation, and put a check in the box Reconnect on Logon (sign-in) it will reconnect every time.

Read other 3 answers
RELEVANCY SCORE 86.8

Hey I got this problem, I am trying to copy a network profile from a computer running under a domain, i got myself admin rights, but I can't copy the profile!

I tried exporting it via netsh too, but It dosen't work ;c

I tried one last thing, entering group policy (I am local admin not domain adamin) but I could not find wlan policies! Please help me

imgur: the simple image sharer
imgur: the simple image sharer

A:Copying network info with group policy protection?

Welcome to Seven Forums,

I'd assume you were trying to copy a User Profile and not a network profile? If it has restrictions in your GPO you'll have to ask your Network Admin or whoever setup the GPO.

Read other 1 answers
RELEVANCY SCORE 86

Dear forum readers,

I know it's possible to configure Wireless settings by policy. However it seems absent from the local group policy, which is where I would like to put it.

How can I do ? Maybe it would work if I copy the corresponding "Wireless Network (IEEE 802.11) Policies" section from a non-local policy template, then import in my local group policy ? I would need such a template though, since I don't know how it looks like.

I'm speaking of the security templates here (the inf files), not the admx files which I have already since I have W10 Pro...

Read other answers
RELEVANCY SCORE 86

This site is just a treasure chest of info!

I'm trying to troubleshoot a problem. I have a Win7 Home Premium 32bit netbook and a Vista Home Premium 64bit laptop on a wireless network. I'm able to share files, folders, and a printer with no problem, but I can't seem to share the DVD drive on the laptop. I want to be able to install software on the Win7 netbook using the Vista laptop's DVD drive over the network. The DVD drive is shared and given full control permission. It shows up on the Win7 netbook, but when I try to access it, it says Windows cannot access (drive name). You do not have permission to access (drive name). Contact your network administrator to request access.

After browsing the net for a solution, I think an entry in the Vista registry is restricting access to the drive through a group policy. I saw on another forum where changing the Default value to 0 may correct this issue. I also changed the ValueType value to 0. Neither worked for me. Then I noticed that DisplayName value, @wsecedit.dll,-59098. (See picture) I researched and found out that it had something to do with a Group Policy restriction. Since there is no Group Policy Editor for Vista Home Premium, could I simply delete that entry? How else could I change or edit that? (I saw on this forum where someone is working on Group Policy Editor for all versions of Vista). Any help or advice would be greatly apprectiated.

dtgVA

A:Share DVD drive on wireless network (Group Policy issue?)

Hi dtgVA,

I am looking into this right now. Vista Home Premium does not have gpedit.msc (and don't use my hack yet, as there is a serious bug in it), however all the controls are still in the registry. All gpedit.msc does is neatly bring all these registry entries together into one neat program. All these settings still work, and Microsoft has kindly provided a spreadsheet with all the registry eqivalents. Therefore, deleting any registry entries, even to do with gpedit.msc which does not exist on Home Premium, will bring you no end of trouble! Do not just delete the registry entry!

Be warned that some CD/DVD drives will not share over a network. There is nothing you can do about this except update drivers and try again. No CD/DVD drive will allow you to burn CD/DVDs over a network.

I will come back to you in a few minutes with a proper answer.

Richard

Read other 12 answers
RELEVANCY SCORE 81.6

Hi,

I wanted to use group policy, on a Windows 2003 domain, to deny certain security groups access to two PC's that are in a public place. I have tried adding the security groups to:

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment

But this seems to be having no effect. Am I going about this all wrong?

Many thanks
 

A:Deny logon with group policy

You need to create a new GPO object in Active Directory, not a local policy on the PC. You should be doing it the other way around, denying access to those two PC's in a public place so they cannot access the rest of your network. You should get a couple of tools to make this process easier. One is the Group Policy Management Console:
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
And another is the Group Policy Common scenarios. http://www.microsoft.com/downloads/...45-8aa6-4775-9208-c681a7043292&DisplayLang=en

There are templates for kiosk mode or high security that you can import directly into GPMC based on users or computers or both.
 

Read other 1 answers
RELEVANCY SCORE 80.8

Hello

I'm typing this message from my old laptop not the computer (sony Vaio) which has the problem.

I wondered if anyone could help me.

My operating system is Windows Vista Home Premium.


When I turn on my computer on the screen I get the message :

'The Group Policy Service failed the logon. Access is denied'.

There is a Sony icon in the middle of the screen. That is the only thing on the screen. When I click that I get the error message above. I thne press the ok button and I go to another screen with only one button.

The is button on the screen is one which offers the options of (in dropdown menu format :

Restart
Hibernate
Sleep
Shutdown


Can anyone suggest how I can get into my computer as there seems no logical way (to my mind) to get into my computer again.

Thanks in advance for your assistance.

Regards

Tony

Read other answers
RELEVANCY SCORE 80.8

hi everyone

i have tried to log on to a standard account on my computer and it said that group policy client failed to log on

so i went to check if the service is on but it is off and i can not turn it back on.

please help me find a way to get it working again
 

A:Group Policy Client failed to logon

See if you can start it with the firewall turned off and try adding it to the firewall exceptions.
 

Read other 3 answers
RELEVANCY SCORE 80.8

Hi,
I have a Windows Server 2012 R2 Standard Edition and Workstations running Windows 8.1. I want group policy to deploy a bat file to RunOnce through Registry and only the first time the user logs on.
I have ticked the box on the properties saying "Run once and only run once" but it doesn't seem to deploy. What i am trying to deploy is a Windows 8.1 Start Menu File so that the user has the start menu that I wish they to have but they
can also edit it and it doesn't keep replacing with the one I want.

I am open to answering any more questions or post pictures of my batch, group policy and registry.

Thanks in Advance,
~ Zac

A:RunOnce deploy via Group Policy only on first logon

Hi
When you mean start menu, do you mean start screen? As I know, there is only one option to deploy a customized Start screen layout to users in a domain and prevent edit from users.
Customize Windows 8.1 Start Screens by Using Group Policy
https://technet.microsoft.com/en-us/library/dn467928.aspx?f=255&MSPPError=-2147217396
Note: Start screen control is supported in the Windows 8.1 Enterprise operating system, the Windows RT 8.1 operating system with side loading enabled, and in all editions of the Windows Server 2012 R2 operating system. Start screen control is not supported
in the Windows 8.1 Pro operating system and the Windows 8.1 operating system.
For Runonce script, keep eyes on the permission of users, if your script was running by using user account but your users has no permission to run these command, it causes failure.
Regards,
D. WuPlease remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Read other 3 answers
RELEVANCY SCORE 80.8

Can anyone please help me fix this? When I attempt to logon I get the following message: "The Group Policy Client Failed The Logon."

(The only way I can logon is to hit the F8 key and go to "Last Known Good Configuration.")

Every solution I search for seems to believe this is ONLY a problem for systems with multiple USER ACCOUNTS.

I have this problem and I have only one User Account on my computer.

The Guest Account is OFF. There has never been a Guest Account set up. I am the Administrator. I even tried turning the User Account Control to OFF but it didn't make any difference.

Can anyone offer a fix? Any help is greatly appreciated.

A:The Group Policy Client Failed The Logon

Hello Macmets, and welcome to Vista Forums.

You might see if doing a System Restore at boot using a restore point dated before this error may be able to fix it for you.

Hope this helps,
Shawn

Read other 5 answers
RELEVANCY SCORE 80.8

My Group Policy logon/logoff scripts aren't being run.

I have an Active Directory object with a group and user both located in it. I've joined the user to the group and applied some group policies to the object already that work just fine, so I know my structure is setup properly.

Now I try to add logon and logoff scripts. For troubleshooting sake, I went ahead and put both scripts on a network share and even referenced them in group policy through the network share instead of the server's local drives. The scripts have read/execute permissions for the group that this Group Policy is applied to. I have even gone as far as logging onto another computer with the user that this is supposed to apply to and manually running the scripts. They both work. I've added these scripts under User Configuration/Windows Settings/Scripts (Logon/Logoff) when editing the group policy from Active Directory.

They're not executing when I log on to a domain computer with this user.
 

A:Group Policy Logon/Logoff Scripts

Read other 16 answers
RELEVANCY SCORE 80.8

Hi All,
A bit of a generic question here as I don't have much to go on, but over the last month or two so we've started seeing more and more users seeing the "Group Policy Service Failed the Logon" error who then can't log onto the PC. We use roaming profiles
too, so once they see that error it seems to then corrupt their roaming profile stopping them from logging on anywhere.
Other users can log onto the PCs without issue.
We've been seeing the problem occasionally since moving to Windows 7 years ago, but there seems to have been a sudden spike.
We're Windows 7 SP1, patched with the latest updates...
Thanks

Read other answers
RELEVANCY SCORE 79.6

1 Computer in 2003 R2 domain is giving the "Windows cannot connect to Group Policy Client Service" error upon logon of local admin and domain admins.  Cannot get group policy to update gpupdate /force = user update failed & computer update failed.
 Gpresult /r = access denied.  I have tried restarting service, disabling anti-virus, uninstalling anti-virus, sfc /scannow, checked DNS on servers, configured alternate static IP on client, still nothing.  Have not tried re-attaching to domain
yet.  Other services are working that require connection to servers such as AD replication, WSUS updating, SEPM 12 updating.  Have seen similar issues on sites but most answers relate to DNS issue, I have not had any problems with any other similar
clients and DNS in this domain.  Any ideas would be appreciated! 

Read other answers
RELEVANCY SCORE 79.6

One of my user accounts have been getting the error above after a shutdown.
I tried system restore but it did not work.
I have tried disabling non-windows service on startup and that didn't work
Can someone help me please!!

A:The Group Policy failed the logon. Access Denied

Here are instructions on how to fix it, or at least, how I fixed a computer at school once.

1. Logon to the machine with a machine administrator account (assuming this issue is with a domain account, if not logon to the machine using another account with administrative privilege).
2. Move the machine to a workgroup from domain. (If it was part of one workgroup then change it to another one or join a domain.) You could do this through Control Panel\System and Security\System and then Change Settings.
3. Restart the machine and logon with a machine administrator account.
4. Delete your user profile data (or move it a different location) completely from c:\users. "C" in my case is system directory but if you have a different one then use that one.
5. Join the machine back to domain account (or to workgroup that the machine was originally joined to), and restart the machine.
6. Logon with your domain account that you were having trouble with. Keep fingers crossed.
If all goes well, you should be logged on.

Read other 9 answers
RELEVANCY SCORE 79.6

This pc is workgroup-based, and both active accounts on it are getting this message.  There are two other accounts, but nobody knows the passwords for them.  So I am totally unable to log in.

When I boot into Safe Mode, as soon as I log in I get logged out.
Booting into Last Known Good doesn't work either.
Does anybody have any suggestions?  At the very least, I need to get the data off of this computer.

Thank you in advance,
Mike

Read other answers
RELEVANCY SCORE 79.6

I stupidly deleted C:\Users\MyName\ntuser.dat. Now when I try to log on to my account, I get the message "The Group Policy Client service failed the logon." I am now logged on to my Administrator account to post this message. All of my files that I use daily are in the MyName account. I deperately need to be able to access the MyName account. How can I restore the ntuser.dat file?

After posting this, I checked C:\Users\MyName\ntuser.dat and saw that it is now listed after I rebooted the computer, but I still cannot login to my account.

A:The Group Policy Client service failed the logon

Hi,

I know this is not the answer you want to hear, but what I would recommend doing is creating a new account and copying all your data across. The ntuser.dat file holds the entire "Hkey_Current_User" hive for that user. Your documents will not be damaged, but recovery of that file will be difficult. If you have any problems with restoring your data, such as Outlook files, then just reply back.

If you do want to attempt recovery, see if you can undelete the file using Recuva then copy it back: Recuva - Download If you have any Shadow hard disk copies or backups of this file, then import them now. Else try System Restore, it may just do the trick. If you have to resort to Recuva, then your chances of succes are almost nil.

Richard

Read other 6 answers
RELEVANCY SCORE 79.6

Hi! I still can't login to my user account.
I've tried every solution I found all over the web (regedit gpsvc etc)
Please help.
Please see the error message every time I attempt to log in.

A:Group Policy Client Service Failed The Logon

Hi marieneregalado,
This issue might be caused by corrupted user profile.
You could boot into Windows Recovery Environment and rename the folder of your user profile under c:\users.
Also kindly follow the steps as mentioned in the link
http://blogs.msdn.com/b/moiqubal/archive/2012/03/04/how-to-fix-quot-the-group-policy-client-service-failed-the-logon-access-denied-quot-error.aspx
Regards
D. Wu

Read other 2 answers
RELEVANCY SCORE 79.6

Access is denied

Can anyone help with this

I have been into the reg to see if the is a .bak to one of the profiles in Profilelist, but there isn't

I have made a new user to access the machine, and Also Safe Mode can access the faulty account, but not in normal mode

Thanks
 

Read other answers
RELEVANCY SCORE 79.6

I am using Vista Business SP2. Two days ago when I restarted my laptop I received the following message while trying to login to my account,
 
"The Group Policy Client service failed the logon, Access is denied"
 
Because of this problem I am locked out of my account and cant get in at all.
 
I am not sure when did this problem started because usually I put my laptop to sleep while I am not using it. I faced this problem when I restarted. I only had one user account as admin in windows.
 
I searched for this problem and found that I could try to login via safe mode. I tried and I am able to login to the same account in safe mode. As suggested in search some people said you could try making another account of admin. Maybe it happened because of the profile getting corrupt. Some people said you could modify ntuser.dat file of the affected account. But I could not find that file, although I could see files (two of them) with same name in new account ntuser.datLog1 and ntuser.datLog2.
 
I cant access my old profile through the new one. 
 
I would like to ask that is there any possible way to recover my old account along with its data?

A:Group Policy Client service failed the logon

If you can login via safe mode you should be able to create a new user account and transfer the data from the corrupted profile.
 
Open a command prompt in Safe Mode and type
 
net user administrator /active:yes
 
This will enable the hidden administrator account. Reboot the computer and in the Administrator Account create a new admin user. Transfer the data then disable the Administrator account in an elevated command prompt by typing
 
net user administrator /active:no
 
https://www.howtogeek.com/howto/windows-vista/enable-the-hidden-administrator-account-on-windows-vista/

Read other 5 answers
RELEVANCY SCORE 79.6

Help....as admin I can sign on but local user get this error message instead. Also now, every program I try to launch google.com, yahoo.com, amazon.com, windows explorer.com.....ALL say "is not responding"...then if you wait 10-15 minutes the initial program will show up, like my home page, then if I select another page to go to, I get the same is not responding message. So tired of this. Called HP they said call my ISP, call them they said call my cable provider, they said sorry don't know the problem....now I contact you for help. Someone out there has to know how to fix this laptop.
HP Notebook, windows 8.1 64bit
thx
 

A:group policy client service failed at logon win 8,1

I found a page which appears to answer your problem. Have a look and see if it helps.
group policy client service failed at logon win 8,1
 

Read other 2 answers
RELEVANCY SCORE 79.6

Hello everyone !
Im using win 7 professional x64!
i was stupid deleted some files like ( ntuser.dat ... ) in C:\User\Username folder
And now , i can not log in to my desktop screen.
I took most 7hrs to searched and tried tried tried , but i did not work.
1. I can not create New Profile when logged into "safe mode"
2. I do not have any restore points create.
3. I purchased window 7 by online and just download and upgraded from win XP , so i can not repair by that way.
How do i do now , so regret when deleted those files.
How can i get it back ? Can i download or copy those files from another PC?
Please help me this step by step please ! thank you everyone.

A:The group policy client service failed the logon

Boot into safe mode, and enable the hidden administrator account ... then reboot and logon using the administrator account and create a new user account ...

Built-in Administrator Account - Enable or Disable

Read other 7 answers
RELEVANCY SCORE 79.6

I also have had norton try to help download a the 360 version and after they took over my desk top I started having the logon problem as the admin. As I was looking through all the problems users have encountered with this I ran across a entry where some had found a free download that would fix the problems, but as luck would have it, before I could write it down my access failed and now I can not find it again. Does any one have that Link?

A:Group policy client server failed logon

Originally Posted by chuckcharrod


I also have had norton try to help download a the 360 version and after they took over my desk top I started having the logon problem as the admin. As I was looking through all the problems users have encountered with this I ran across a entry where some had found a free download that would fix the problems, but as luck would have it, before I could write it down my access failed and now I can not find it again. Does any one have that Link?



Am not able to get u. Is this is happening on clients of your domain. what is the exact error message, at which instant you are getting this..

Read other 3 answers
RELEVANCY SCORE 79.6

I am using Windows Vista Business Service Pack 2 and having this error while I try to login to my account. 
 
"Group Policy Client service failed the logon. Access is denied".
 
Earlier on I had only one account (Admin only) but after having this error I was unable to login to my account. I searched on internet and found the one solution to access the affected account in safe mode (to copy the useful data) and make new account.
 
After continously using the new account for some time (without shutting down my laptop) if I log off from newer account and then login to my old account. I dont get the Group Policy .... error and get logged in to my old account. But the problem is if I shutdown I get the same error and have to repeat the cycle by using the new account for some time and then try to login to older one.
 
With the new account I am unable to access data from old account and also some of the data in another drive. Is there any permanent solution to this issue without reinstalling the windows.

A:Group Policy Client service failed the logon

Hi jackhero,
 
Login to old account and use Windows Repair (All In One) utility to reset registry permissions and reset file permissions.

Read other 8 answers
RELEVANCY SCORE 79.6

I turned on my computer and I saw this, I searched up the internet for fixes and I haven't found anything, I tried doing a fix from Windows 8/10 which is press Windows Key and R and nothing even came up, please help I keep a lot of my art on that PC.

Sent from my ASUS_X008D using Tapatalk
 

Read other answers
RELEVANCY SCORE 79.6

Access is denied

Can anyone help with this on Win 7

I have been into the reg to see if the is a .bak to one of the profiles in Profilelist, but there isn't

I have made a new user to access the machine, and Also Safe Mode can access the faulty account, but not in normal mode

Thanks

A:The Group Policy Client Service Failed the Logon

Is your computer a standalone machine, or is it joined to a domain? Try to rename your affected user profile folder in c:\users, and then log in with the affected account. I hope this will work.

Read other 1 answers
RELEVANCY SCORE 78.8

Now what?
Tried system restore, again. At least once a week now.
The real question is WHY!!!??? Why at all? Why all the time. Vista has been the MOST frustrating operating system we have owned. Almost 20 years with computers, and I can't believe I keep buying Microsoft. OMFG....
At least once a week we have issues. Compatibility, profiles deleted, uploaded files just gone for no reason, login failed. Our frustration has finally peaked.
How do we get this POS working again?

A:The group policy client failed the logon. Access is denied?

Hello FedUpVistaSucks,
Can you provide some system specs, thanks.
Do you have a Vista DVD/CD ?.
Can you get in via safe mode ?.
When we get a bit more info, we can get into it.

Read other 1 answers
RELEVANCY SCORE 78.8

I recently purchased a new Windows 8.1 computer for use in our organization.  The default logon option for the device is for a Microsoft Account (the default username field prompt is for an e-mail address, rather than for a username.)  However,
I would prefer that the default logon option be for a Windows domain account logon, so that users don't have to click the "Sign-in options" link and select "Local or domain account password" each time they need to log onto the computer.
I have learned that setting the "Interactive logon:  Do not display last user name"
policy (located under Computer Configuration / Policies / Windows Settings / Security Settings / Local Policies / Security Options) to
Disabled allows the domain logon option to be retained across sessions.  However, I would prefer to keep this option set to Enabled so that the previous user name is not displayed.
Does anyone have any suggestions on how the default logon option can be forced to a domain logon, while still suppressing the display of the last username?

A:Windows 8.1 Group Policy to Force Domain Logon as Default?

Hi Arowitv,
According to your description, we can use the following policy to check the result.
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options:
Accounts: Block Microsoft accounts
Click this option, and select" Users can't add or log on with Microsoft account"
Note: Selecting this option might make it impossible for an existing administrator on this computer to log on and manage the system.
Computer Configuration\Administrative Templates\System\Logon :Assign default domain for logon
Set the option to Enabled, and add the Default Logon domain.
Hope this helps.
Regards,


Kelvin Xu
TechNet Community Support

Read other 4 answers
RELEVANCY SCORE 78.8

I cannot open my computer, I get this message. It is a personal computer and I am the only user so i can't log on with an administrator account. I can press f8 to get to that screen, but don't know what to do after that. I found Pianiste on one of the
forums who had the same issue about a year ago but could not see if she was able to solve this problem. The person who sold me the computer set it up so that I would not need a password. It is Windows 7. Would appreciate it if anyone can help me with this.
Thanks in advance. sorry if this is the wrong forum, can't see which one would be better.

Read other answers
RELEVANCY SCORE 78.8

My PC got infected with a w32.virut virus.. so after searchin for a solution.. i had ir removed using symantec virut removal tool.. run the tool while my PC is at safe mode and internet off... And when its all done and restarted my pc at normal mode.. My PC keeps turning off and when i get back on and login to Admintrator acct, i keep getting this.. The Group Policy logon is denied.. The media is write protected Hope someone out here can help me out.. Thanks in advance and more power!!! xoxo

A:Help me plz - Group Policy logon is denied.. The media is write protected

I've sent a message to our security and malware removal specialist asking her to take a look at your problem and see if she has any suggestions. Unfortunately, though she was here when i started the message, she had logged off before I sent it so it may be a while before she responds. In the meantime, try the following:

Do you know when this problem began? Try a System Restore to a point in time BEFORE the problem began. Here's the procedure: http://www.vistax64.com/tutorials/76905-system-restore-how.html. Be sure to check the box to show more than 5 days of restore points. If the first attempt fails, then try an earlier point or two. NOTE: You will have to re-install any software and updates you installed between now and the restore point, but you can use Windows Update for the updates. Use the recovery disk if the system prompt doesn’t work. The recovery disk works a bit different from the above procedures but if you follow the prompts from the System Restore menu option with the above information you should be able to restore with no problems. This may restore the virus as well, so it may need to be removed again, but I would hold off on the procedure you used before as it seems it caused a lot of problems. Let's let our expert advise you what to do if we can at least restore you to working condition but even if we get it working again, I'd try to avoid using it as much as possible - especially going on the internet - as using it may spread the infection (but you c... Read more

Read other 4 answers
RELEVANCY SCORE 78.8

Hoping someone can help me!

All of a sudden I am unable to access my computer desktop due to the above error message.

I have an acer laptop which came pre installed with windows vista basic so I have no disc... It is a home computer so the only logon we use is the profile named 'aver valued customer' which doesn't require a password.

I can get as far as this icon but everytime I click it I get the above message. I have tried running in safe mode and have also tried system restore but keep getting back to this initial logon screen which doesn't work.


Can anyone please help??

A:Group policy server failed logon. Access is denied.

Welcome to the forum. when you get to the login page is there any option to login as another user often just an arrow next to the name or switch user it seems it thinks its on a domain and your trying to login to a domain that you dont have. Can you get to safe mode with a cmd prompt?

Read other 8 answers
RELEVANCY SCORE 78

Please help i have done many searches and i can't seem to find anything to fix my issue.
My computer said it needed to do an update so i let it run the update and it prompted to restart the computer so i did that, i logged to my user account which is the administrator account and it said it didn't recognize my user profile so i was using a temp profile. Somehow my computer was unplugged and when i started it up it brought me to the user log in page i tried to log in and it says group policy client service failed log on access is denied. I can log on the standard user account but not my account which is the administrator account. But i can log on to the administrator account in safe mode. I don't understand and need lots of help to get back in to my account...
 

A:group policy client service failed logon access is denied

Go into Safe Mode as admin and try a System Restore : Start button / All Programs / Accessories / System Tools / System Restore.
 

Read other 2 answers
RELEVANCY SCORE 78

I only have one account on my computer and its my administrative account. When i try to log on this message pops up and it: Group Policy Client Service Failed the logon Access Denied and then it logs me out i cant even enter my computer

I would really appretiated if someone could tell me how to fix it without having to send in my computer for repair and paying 200 something dollars.

Thanks for the help

A:Group Policy Client Service Failed the logon Access Denied

When did this problem begin?
You can try a system restore thru WIN RE.

Read other 5 answers
RELEVANCY SCORE 78

I am a system administrator. In My organization we have few users who frequently getting the group policy error When they login into their respective machine. They are able to login after typing password multiple times and some times its works after
reboot. We have recreated the uses profiles multiple times and also replaced laptops.

We have also tried to rename the roaming profile of the users in the server. Issue occurs everyday when they login for the first time and for some users it happens when ever they unlock the machine. 

Client OS :  win 8.1
Profile : Roaming 
Can you please help me on this ?

Thanks in Advance :) 

Read other answers
RELEVANCY SCORE 78

I would greatly appreciate any assistance.

I got the dreaded "User Profile Error - Logged on with a Temporary Profile" screen 2 days ago. I saw google updater briefly before my system restarted and I've read that may be a cause. Anyway, I was able to back up most of my files. I restarted my laptop and to my surprise, it was back except the theme was different and couldn't be altered which I could deal with. A few other things were off but it was usable.

Unfortunately, a little before midnight, there was a power outage. My laptop has a dead battery (well almost dead so it gives you about a minute) so I just shut down without closing each program one by one. I force quit but it did shut down on its own. The power came back on but I got the following error when I tried to login this afternoon.

"The Group Policy Client service failed the logon. Access is denied"

I'm running Vista Ultimate. I could not get past the login screen. I could login in as guest but I only had one administrator account. I was able to boot in safe mode and my files are still there. I was even able to export my Firefox history, save my passwords and do a back up of that. I created a new administrator account in safe mode. I was able to login and use my laptop normally (connect to internet etc) but of course, it's not my real account.

I do not have the cd that the laptop came with because it was a hand-me down, come as is. I've been using it since 2006. I cannot do a system restore,... Read more

A:The Group Policy Client service failed the logon. Access is denied

Lets hope with a little luck the explanation given in this great tutorial resolves your problem.
User Profile Error - Logged on with a Temporary Profile

Read other 3 answers
RELEVANCY SCORE 78

Most of the suggestions offered up by google include using the admin account.
In my case, this happens with my only and thus admin account (personal computer - windows 7).
I would like a solution if possible avoiding a system restore as there are files I do not wish to lose.
I have had issues with the concerned computer for the past 2 months, loading up a temporary profile, and necessitating renaming of the profile via regedit (removing the .bak).

I have attempted to activate the integrated admin account via the console in the system restore menu, which the console accepted ; however it does not appear, and when I try to log in with 'admin' user name, I am informed it has been deactivated.
Thanks in advance.

Read other answers
RELEVANCY SCORE 78

hi, thanks for taking the time to look at my problem.

basically what's wrong is that every time i try to log into my user's profile i get a message saying 'Group Policy Client Service Failed the logon - Access Denied' and then am prevented from logging in. if anyone can help me resolve this issue i would be very grateful. thank you.
 

A:Group Policy Client Service Failed the logon - Access Denied

Can you provide more details about your setup?

Is this a domain or local account? What Windows Group(s) is it a member of? Do you have other accounts that you can log into?

And just to be sure, have you applied all Vista updates?
 

Read other 1 answers
RELEVANCY SCORE 78

It seems I had some sort of Trojan/Virus at some point. Looks like I got rid of it for the most part considering Malwarebytes and Kapersky no longer pic up any sort of inefection. However it left some lasting damage in the form of that error message that I get when I try to log on my main user.
I can still access it in safe mode but that is it.  Only thing I was able to do so far was just create an entirely new user with admin rights and transfer everything from one to the other. However now with this new user I keep getting a counterfeit windows error that won't go away. So fixing my orignal one and regaining access to it would be nice. All attempts so far have failed so any help at all would be greatly appreciated.

A:The group policy service client failed the logon. Access in denied

Hi -EDIT - Please click on Follow this topic at the top Right side, and select Instantly -You can post these one at a time if it is easier for you -   Download Security Check by Screen317 from HERE* Save it to your Desktop.* Double-click SecurityCheck.exe* Follow the onscreen instructions inside of the black box.* A Notepad document should open automatically called checkup.txt; please post the contents of that document.Note: If a security program requests permission to access the Internet, allow it to do so.    Please download MiniToolBox, Save it to your desktop and run it.Close any Firefox browsers you may have openCheckmark the following boxes:•Flush DNS•Report IE Proxy Settings•Reset IE Proxy Settings•Report FF Proxy Settings•Reset FF Proxy Settings•List content of Hosts•List IP configuration•List last 10 Event Viewer log•List Installed Programs•List Users, Partitions and Memory size.•List Minidump Files Click Go and copy / paste the result (Result.txt).    Download Malwarebytes' Anti-Malware Free (aka MBAM)* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.* If an update is found, it will download and install the latest version.* Once the program has loaded, select Perform quick scan, then cl... Read more

Read other 25 answers
RELEVANCY SCORE 78

I have windows 7 and when I turn my dell  laptop on this is the message i get after entering my password. My computer works in safe mode but not in normal mode. How do I get rid of this with out loosing everything on my computer?

A:the group policy client service failed the logon. Access is denied

Hi,
Before going any further, I would like to verify these situations:
1 Did this issue appear before?
2 Did your PC in a domain?
 
I suggest to perform some tests which mention in:
http://social.technet.microsoft.com/Forums/en-US/itprovistaapps/thread/c88515b4-4be7-4f6f-9988-80f8a5683b41
Even though they are for Vista, they should be applicable to Windows 7 too.
 
If this issue persists, you can try to make a system restore:
Perform a system restore in WinRE
  1) Restart PC
  2) Press “F8” and select “Repair Your computer”
  3) choose System Restore.
 
Also this link may helpful to you:
 http://social.technet.microsoft.com/Forums/en/w7itpronetworking/thread/5d8d1157-88a3-43e7-a248-6bb9a960b30f
 
Hope it helps.
 
Regards,
Leo  
Huang
 Please remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Read other 2 answers
RELEVANCY SCORE 78

A computer was handed to me to fix. Well it's a Windows 7 laptop. I'm not actually by it right now so I can not tell you the manufacturer at the moment; but I'll try to explain everything I can.
I usually am very good with this stuff but the thing is, I've only came across an error like once before and I had to wipe the hard drive clean and re install everything. However my friend, she doesn't want me to do that. So. I have to try to save it all.

I've tried a lot I guess. It won't boot in safe mode, obviously, and it won't log at all, obviously. There's no second account. So now you know this. I'll continue on with what I've done.
I've done a couple things, actually. Before I tell you what I've done. I just so happened to be able to get in once. It logged in and said desktop could not be found and all that jazz. I was able to run SuperAntiSpyware and it got tracking cookies and like probably 1 or 2 Trojans and I removed those. Then it restarted and locked out with the same error.
I booted up with Kasperky CD I made a while ago. Didn't help, not really surprised. I went to go do system restore multiple times and none of which worked. There's other things I tried but can't remember at the moment. Honestly. I'm lost on what to do right now. I have no idea how on earth I would fix this.

I can't tell you on the specs on the computer because I can't access it so I can't get them. Also I do not have a disc from Microsoft for windows 7 recovery. I just read that doing t... Read more

A:The Group Policy Client Service failed the logon, Access is denied.

You might want to work on the steps here Troubleshooting Windows 7 Failure to Boot and report your findings.

Read other 1 answers
RELEVANCY SCORE 78

i'm facing one issue with the roaming profile, when i'm trying to login on all machines (7 machines about) i receive  this error message ''
The Group Policy Client service failed the logon. Access denied.

your help please.

Read other answers