Over 1 million tech questions and answers.

Group policy error; admin cannot login as admin.

Q: Group policy error; admin cannot login as admin.

Hi, from my research I saw this is the best place to ask these types of question. Any help is appreciated.
Here is the gist of my issues:
Windows 10.
I had just finished downloading a file from our Google drive directory; it was for some anti virus.
Right after the anti virus installed Windows froze up, and an error popped up. It stated Windows had crashed or something along those lines.
I had to unplug the cord.
Once rebooting I noticed it was taking incredibly long. The screen went to yellow showing signs of loading, then to black. I could move my mouse here,
After this happened the login screen appeared. Everything was very slow. I tried to right click and noticed it freezing up.
After it finally loaded the login screen I entered in my pin, but it took over 10 minutes then went to black.
After other tries to boot I had very mixed signals. Sometimes it made it to the login, other times just a black screen.
On one occasion I got this error:
"The Group Policy Client Service Failed The Sign-in. The Universal Unique Identifier (UUID) Type Is Not Supported."
Sadly, this is for the admin account.
I have no idea where to go from here, and have a lot invested file, and program wise, and thus time wise into this set up, for work.
Any ideas where to go ? I cannot access system restore or anything as it won't let me log in.
Any help is appreciated.
Edit: title shouldn't say admin at the end. Meaning I cannot log in to the admin, or any other profile.

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Group policy error; admin cannot login as admin.

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 112.8

Windows 7(x86) HP (SP1) desktop.. Avast Free, Malwarebytes, Spybot S&D (scan daily, all report clean).

I'm getting constant Error 1303 Insufficient Priveledges when trying to install.. anything at all, even when Run As Admin. I managed to get a couple programs installes by digging into the ProgramData folder, and trying multiple attempts and changes to Take Ownership, Run As Admin, Properties, Sharing.. etc.. I just dont get it.. I even disabled Avast thinking it might be blocking.. something..

To top it off, when I enabled the hidden Admin User acct to try to install with the Admin acct, I attemp to sign in as Admin.. I get "Group Policy failure, unable to login" then it flips back to my user acct screen.

I am unable to change any setting in the HomeGroup sharing either. Everything is stuck on Share With Nobody.

There are multiple fails going on here, they're all Share settings based.. but I just cant change anything.

A:Error 1303 Insufficient Privledge whn Run as Admin & Group Policy fail

Nothing, no one has ever seen this?

Read other 1 answers
RELEVANCY SCORE 104.8

Hey all! I work in the IT department and we need some way to stop people from installing programs on their computer. We're running WinXP Pro. and tried to just make them limited user accnts but for some reason they cant get onto our AS400 unless they are an admin. already tried to reinstall client access (the as400 program) on the limited accnt but to no avail. I was looking at group policy but i cant find a way to stop people from installing programs they're not supposed to have and still have (almost) full functionallity of the comp. So if anyone has ANY ideas i'd love to hear them! Thanks in advance!

A:Group policy, admin. question

Well, you had the right idea for that originally. I don't know what the interface is for client access to the AS/400 exactly but is it possible that, in a limited user mode, access to the AS/400 could be run in Administrator mode (w/o giving the users themselves the account password?). You might check with support for your AS/400 or the particular client access interface to see if they acknowledge that it can only be run from XP Pro as an administrator or have some work-arounds prepared.

Off-topic but in my experience, the benefits of having the users operating at anything less than Priveledged User or local Administrator for their machine isn't worth the myriad of headaches caused by crippling them and always in the really urgent and time-critical instances. Prescribe what conduct you expect from them in corporate policy or what-have-you but don't actually lock down their PCs. JMHO.

Read other 5 answers
RELEVANCY SCORE 104

gpd is preventing me from doing most anything with my PC.Accidentally, II activated something as administrator and now I am limited as to what I can do I get windows saying blocked by group policy editor from performing this action. see administrator. I had admin privileges until reboot and now password has been changed,not by me.I am the only one with access to pc.please help me. I cant remember what I did to activate this problem.

A:can group policy be disabled without admin rights?

You don't remember exactly what you did?

Group Policy - Apply to a Specific User or Group

Problem being you have to be administrator.

Read other 4 answers
RELEVANCY SCORE 102.8

We have a special image that I am required to have on all PC's at my job and I usually just enable the desktop wallpaper in group policy and point it to the path. This has worked for as long as I can remember.

In windows 7 group policy editor, I set the desktop wallpaper in:
User Configuration
Admin Templates
Desktop
Desktop
Desktop Wallpaper

I set it to the local path where the rest of the desktop wallpapers are stored C:\Windows\Web\Wallpaper\XXXX.jpg

I did this while logged in as Administrator. It shows up under the Administrator account but it does not show under the other 2 accounts on the machine. Yet the other changes I set in the policy work under the other 2 accounts. The weird thing is, as I logoff these other account, the picture I set will flash for a second on the screen, then the account logs out.

I have done this countless times on machines without issue, I don't know what is happening. I even reloaded the machine just in case and it still is doing it.

I checked all over the registry where it relates to wallpaper and the correct path to the image is shown. I really don't know what is happening. The only way I can make the image stay is to log into each account and pick the image manualy which gets time consuming when I am loading a ton of PC's.

Any ideas? I have deleted and recreated the users, same deal.

A:Group policy wallpaper not working for non-admin accounts

Hello Jack, and welcome to Seven Forums.

It may be some sort of permissions issue with them not having read access to the Wallpaper folder. You might see if having the image in one of the C:\Users\Public folders may work instead.

Desktop Background - Specify and Prevent Change

Hope this helps,
Shawn

Read other 9 answers
RELEVANCY SCORE 100.4

Most of the suggestions offered up by google include using the admin account.
In my case, this happens with my only and thus admin account (personal computer - windows 7).
I would like a solution if possible avoiding a system restore as there are files I do not wish to lose.
I have had issues with the concerned computer for the past 2 months, loading up a temporary profile, and necessitating renaming of the profile via regedit (removing the .bak).

I have attempted to activate the integrated admin account via the console in the system restore menu, which the console accepted ; however it does not appear, and when I try to log in with 'admin' user name, I am informed it has been deactivated.
Thanks in advance.

Read other answers
RELEVANCY SCORE 100.4

My site needs IE edge   rendering mode , In my home computer my site is rendered in edge mode, but  in my office network its always rendering in
IE-9 mode, I believe  its due to a group policy setting, is there any way I can check group policy setting for IE rendering mode ? I dont have admin permissions in my office network.  Is that something
a non system admin can see this?

Read other answers
RELEVANCY SCORE 99.6

Hi
2008 Dell Precision T7400 with Base Dual Intel Xeon E5420 (2.50GHz,1333FSB,2x6MB,Quad Core)
Memory 8GB, 667MHz, ECC Memory (8x1GB)
Video Card 512MB PCIe x16 nVidia Quadro FX 1700 (MRGA14L), Dual Monitor DVI or VGA Graphics Card
Hard Drive 320GB (7,200 rpm) SATA 3.0Gb/s Hard Drive with NCQ and 16MB DataBurst Cache™.
Windows 7 x64 Ultimate upgraded from XP Professional x64 Edition SP2 (NTFS) about a year or so ago.
Thursday I did a defrag and have no system restore point. The same night I updated Boinc BOINC and Oracle Virtualbox was also installed with it. The problems started after when I went to log in the next day.

First sign of a problem was getting a message windows could not connect to the Group Policy Client service. This problem prevents standard users from logging on to the system. As an administrative user, you can review the systems event log for details about why the service didn't respond. I am the admin but it won't let me view event logs, when I go to event viewer the icon is blank like the link is missing and it won't open. It is in the system32 folder though when I look for it but it won't open from there either. I can view it in safe mode but I have to open it by going to the Windows\system32 folder. Sorry forgot to take a note of what it says I'm running a full virus scan at the moment. I did find that topic about restoring/fixing group policy in Regedit but it was fine and I didn't have to fix it.

Malwarebytes found some malware in the Reg... Read more

A:Group Client Policy / Admin issues / links not working / files missing

Virus scan from Microsoft Security Services didn't find anything (not sure if its up to the job though)

Probably best to do a repair install. Microsoft's Management Console started to act up in safe mode, snap-in stopped responding.

Loads of errors in event logs these are some of them.

The winlogon notification subscriber <GPClient> was unavailable to handle a notification

Faulting application name: mmc.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc808
Faulting module name: mmc.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc808
Exception code: 0xc0000094

The winlogon notification subscriber <Sens> was unavailable to handle a notification event.

The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification

Windows Management Instrumentation Service subsystems initialized successfullyevent.

Volume Shadow Copy Service error: Writer with name WMI Writer and ID {a6ad56c2-b509-4e6c-bb19-49d8f43532f0} attempted to subscribe in safe mode.

Operation:
Initializing Writer

Context:
Writer Class Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}

The winlogon notification subscriber <GPClient> was unavailable to handle a notification event.

The Base Filtering Engine service terminated with the following error:
The system cannot find the path specified.

The Windows Firewall service depends on the Base Filtering Engine service which failed to start because of the following error:
The ... Read more

Read other 2 answers
RELEVANCY SCORE 98.4

Hi,
I would like to give software Installation restriction for Domain Admin users but he can have all of remain admin rights.
If he want to install any software it should be ask for password.please suggest to me is there any Group Policy for that one.
Server : windows 2012 R2
Clients : windows 10 

Read other answers
RELEVANCY SCORE 95.6

Acessing your account. Can the admin use AD or a domain service to over ride the local policy?

A:When setting a local login policy to block a domain admin from accessi

vvcmarttech, sorry but domain admins in the AD can do most anything they want. No hiding from them.

Rich

Read other 2 answers
RELEVANCY SCORE 92.4

Running Windows 7, Cant get Admin permissions on desktop that I am only person ever on.  I am owner, admin both show full control but unable to do simple tasks like Back Ups or System Defrag. or Analyze or Updates of software.  There is a app "True
Key Password" by McAfee that I can't seem to get rid of any way I try, thats where this all started.  I tried to delete through control panel/program uninstall, its not there. In my computer is shows up as "Intel Security True Key". 
Someone said I need to download McAfee unistall program, but I dont care to get anything from McAfee after this mess.  
When I attempt any uninstalls, at the end it needs to restart, then it wont take my password to sign on again.  A error message about Group Policy in small print comes up.  I re-try my password 10 + times, same password I have had for years,
then all of a sudden it goes through and starts up normal.  I couldnt get in Safe Mode either.  Even after the restart the program is still listed under my programs

Read other answers
RELEVANCY SCORE 92.4

Hi
I need to either change a guest log in (kid's access) to
adminstrator, or a way to reveal or change the password
for the Admin profile. Thanks for your help.
I tried this already: Run: cmd net user guest *
I tried to rest the guest password this way but
it didn't work - I'm thinking it is because I am not
logged on as admin in the first place. What do I do now?
Thx
lrr

A:change guest login to admin or figure out admin password

you cant change an admins pw from a guest account....at all

only way to change the admin pw is to boot to safe mode and enter the sys admin account or use a hacking program iso which you can find easily but use at your own risk....

Read other 2 answers
RELEVANCY SCORE 91.2

After I login to windows 10 I get a popup notification of an error that says;"Windows couldn't connect to the Group Policy Client service..." It seems to be related to an error in the event logwinlogin error 6003 Any thoughts on what causes this and how to stop it?

Read other answers
RELEVANCY SCORE 90.8

Hello.

I am having a lot of issues with my work computer, and the IT guy here doesnt know what is wrong. I am suppossed to have Admin Privileges. But I am not able to download programs or delete shortcuts from my desktop.

For example, when I try to go to "Local Secuirty Policy", it says "Access is denied" "You do not have permission to perform this operation."

Now, everyone in my company (6 people) is linked over a shared network. I beleive the user accounts are linked too. In other words, my coworkers can sign on to their account on my computer, even though they do not have any local information stored.

My username (that I see when I press the start button) is "PSI Staff". When I open the "Local Users and Groups" window, the only users I see are "Administrator", "Guest", and "Nadia15". I do not see "PSI Staff". So I am assuming that "Nadia15" is "PSI Staff".

However, when I right click on any document, click properties, and then click secuirty, I see the following image. (Attached).

All I want is to have admin rights. Any one have any ideas at all???

Read other answers
RELEVANCY SCORE 87.2

Hi all,
I received this message when i tried to look at the local group policy setting on one of my machines (Windows XP SP3), which is joined in my domain.
"Failed to open group policy object on this computer. You may not have appropriate rights.
Details:
Unspecified error."
note that I am local admin.
It's all started when I was troublshooting WSUS connectivity and i looked at the WinsdowsUpdate.log, the WSUS server was <Null> & WSUS status server <Null>, I tried to force the domain GP by using GPupdate /force, it went fine and asked to
log off, but nothing changed in the WindowsUpdate.log still <Null>. Then i tried to look at the local policy setting.
I searched the internet nothing related to my case.
Thanks in advance for advising.
Mohammed Adel

A:Group policy error: Failed to open group policy object on this computer.

I guess reinstall windows is the solution, I also found one log "event id 1096", related to "registry.pol" it was corrupted.
Regards,
Mohammed Adel

Read other 9 answers
RELEVANCY SCORE 86.8

DC: Win Server 2003
Laptops: Win7 Pro

When joining a set of laptops to the domain it prompts for domain admin credentials and appears to be successful, but gives an error of 'Changing the Primary Domain DNS name of this computer to " " failed. The name will remain domain.local
The error was:

The RPC Server is unavailable.

When attempting to add Domain Users to the local administrators group:
Windows cannot process the object with the name "domain users" because of the following error:
The RPC server is unavailable.
This happens even when wired on the network. I have tried uncommenting the localhost line in HOSTS, and manually adding the DNS server (which is also the DC).

Any suggestions would be very helpful.

A:RPC error adding domain users to local admin group

Have you checked the RPC service on the server? Manually stop and restart it as well.

Read other 4 answers
RELEVANCY SCORE 85.6

Hi

We upgraded our desktops from Windows XP to Windows 7, with Windows XP we used the resource kitís CDROMLOCK.EXE to lock down CD and DVD. Once installed a user had to be in the local administrators group to access a CD or DVD on that desktop.

For Windows 7 it is not Windows 7 compatible so I run the EXE in Vista SP-2 Compatibility mode, which works perfect.

My question: With a user in the local admin group they have access to the CD and DVD, but also have full access to the desktop, which is of concern. Does anyone know how to assign a user name (Either local Desktop or a Server 2003\2008\2010) domain account to a service or Exe?

Is there a way to either create a folder with full rights and then put the exe in the folder, giving the user full admin rights to the folder, or assign full admin rights to s single EXE file?

I am just not sure how Windows 7 controls local admin rights other than the local Admin Group.

If this is in the wrong group, please move.

Thanks

B.
 

A:Assign Local Admin Rights without local Admin Group

You should be able to right-click on the exe file, then choose properties. On the "Compatibility" tab, there should be a checkbox for "Run as administrator", which you can check (enable) and save settings.
 

Read other 1 answers
RELEVANCY SCORE 84.4

how do I add these permissions to my account? I'm trying to change "How a Service is Started" and it won't let me without one of these persmissions. thx

A:Account Operators group, the Domain Admins group, the Enterprise Admin

  
Quote: Originally Posted by bellaneph


how do I add these permissions to my account? I'm trying to change "How a Service is Started" and it won't let me without one of these persmissions. thx


Is your account a standard user, or a member of the admin group? You can check cpanel>users>your user. Does it say admin?
Ken

Read other 2 answers
RELEVANCY SCORE 84.4

Hi Yet again, Windows is frustratingly taking up all of my time and I have tried everything google has to offer to try and fix it but it seems like no one has screwed up as much as I have on whatever forum. Let me explain the problem: I'm trying to set my account to administrator because I can't install programs, change account settings, make any changes through CMD without getting the system error 5 access denied message and I can't set the administrator account through CMD either. I also don't have the permission to change anything in regedit and I can't even reset my pc because it requires an administrator password which I don't have, is not "nothing" nor is it administrator or admin or password and I can't change it through cmd either. I can't even access the administrator account because it is disabled and even with an elevated cmd I can't activate the "hidden" administrator account. I've ran malwarebytes and superantispyware and I am now looking for the Gandalf of all Geeks to help me solve this problem. I'd immensely appreciate it!

A:System error 5 | No admin rights | Lost admin password | can't reset

Hi. When a computer is first setup, the account created is an administrative one. What happened to this account?

Read other 0 answers
RELEVANCY SCORE 84.4

Hi my nephew brought me his laptop that no longer allows him to login to it. Every time we tried to login in to the admin it says "the Group Policy Client service failed the logon" and its the only account on it. Since its a hp mini I don't know how to restore windows with my disc. I couldn't think of any way to solve this problem. It also displays " HP quick web files missing or corrupt. Please reinstall HP Quick Web from Primary operating system.

Any help will be much appreciated
 

A:HP mini 210 Login Admin Error

Down near the bottom of this page is a link to download and install HP QuickWeb
http://support.hp.com/us-en/document/c02043846
 

Read other 2 answers
RELEVANCY SCORE 82.4

ok, thanks for welcoming me to TSG, i read the posts etc for hlp and they are great, however my problem is not covered by the search button.
its my friends pc and spec is athlon xp2200,80gig hd, 512mb ram, xp home,4 login accounts,3 set as admin level.

ok, ill be as through as i can with what has gone wrong and what i have done at each stage to correct it. i dont want to reinstall cos its my friends business pc with loads of data on, and yes he does not have a backup cos he dont do them.(he will know though )

he installed corel draw 4 (bad news i know - old 16 bit app for win95) and then rebooted. he couldnt log in on his user as he got an error about "INVALID ACCESS TO MEMORY LOCATION". none of the other logins worked as they suddenuyl had passwords on them.

ok i took it off him and tried the login. safe mode admin didnt work as it had suddenly got a password on it. i also got some memory ref 0xc00000bb and same error message.

obtained the password crack cd boot image from (website not allowed- boot disk site suggested by a mod on another forum post) and did a reboot.

lots of the accounts where locked so i sorted that and reset all the passwords to blank.

rebooted and got an error on bootup so had to switch to using a floppy disc with an xp bootup on it created usuing a program from a guy off the net called gilles villiant.

ok got to the login screen and tried the users but this time just got an error about typing the password in correctly. did the old ctr... Read more

A:xp login error admin account restriction -tough one this

Read other 16 answers
RELEVANCY SCORE 80.8

Right, I have been driven mad by an odd problem with logging into Windows 7. After a clean build following a major upgrade it now shows the "Welcome" page for around 10 seconds before loading the desktop after entering my password. Interestingly this only happens to accounts with admin privileges - if I set myself as a normal user login is instant, also the delay happens after making a new "admin" account - again the delay goes away after this test account is set as a normal user.

After disabling everything but the basic services it still occurs, I have also updated all my drivers. The only difference in the logs between admin and user accounts is the occurrence of an error from Desktop window manager - you can also see the delay in the login process. Googling the error doesn't shed much light.

Information 31/10/2011 08:14:43 ESENT 102 General
Information 31/10/2011 08:14:24 Winlogon 6000 None
Information 31/10/2011 08:14:24 Winlogon 4101 None
Information 31/10/2011 08:14:18 Winlogon 6000 None
Information 31/10/2011 08:14:18 Desktop Window Manager 9009 None
Information 31/10/2011 08:14:12 Winlogon 6000 None
Information 31/10/2011 08:14:12 Winlogon 4101 None

The full error is "The Desktop Window Manager has exited with code (0x40010004)"

logs: http://dl.dropbox.com/u/11422169/bryanlogon.txt - admin account
http://dl.dropbox.com/u/11422169/peterlogon.txt - normal account for comparison

Any help would be appreciated as it's frust... Read more

A:Slow login for Admin users - Desktop Window Manager error

Same here. Regular users logon in 5 seconds. Admin account type users take about 2 minutes ! Wish I knew what was up.

Read other 8 answers
RELEVANCY SCORE 80.8

Hi,
I have been looking for this answer for 2 days and can not find anyone who has had similair problem.

THere are 2 accounts Administrator and Kenmystro/administrator. I have the password for both and can access both. win 7 Ultimate Hp8510.
I have already selected all user permissions and taken ownership in every box I could find for Kenmystro/admin. the UAC is at minimum and the security centre is off. Run as admin on right click does not help.
It does not matter which of the 2 accounts I log into when I try install certain HP software(Maintenance
& some drivers) it says I do not have admin privileges.

This is driving me nuts can anyone help??
 

A:admin account and user admin still no admin privilages

Read other 6 answers
RELEVANCY SCORE 80.8

I hope someone can help me.

Just this morning i booted up as normal and the always annoying UAC notifications kept popping up. I was sure i had disabled these! Then i went to use my music software and it said that this account didn't have admin privileges.

I checked my user account and the check box states that is is an admin account and that UAC is turnd off. (i only have one account anyways)

Ive looked on google extensively, Tried making new profiles and copy the old one over, but that only worked to a certain point - lots of programs didn't work, lost mail settings etc. Not really workable.

Tried system restore to no avail.

Tried using the vista admin account and changing my account - rebooting - etc. No change.

My guess is that something has got corrupt in my user profile and windows is not remembering that i should be an admin. I can't use my software and i have a deadline!!

Any one who can help will win a magical prize or something!

Jen

A:Admin account stopped being admin even when admin is checked!

Welcome
Should be easy, create a New Administrator account and give it permissions to use the software.
User Account - Create
http://www.sevenforums.com/tutorials...rs-groups.html
Procedure for Seven is the Same as For Vista.

Read other 1 answers
RELEVANCY SCORE 77.6

today 5 optional updates and 1 important update installed and on restarting i got a screen saying group policy prevents you logging in OK button was there.
by the time i got my mobile to get a photograph of the message it went back to screen saver . again i tried to login it went alright . what could have prevented from logging in?
following updates installed today . while restarting it got stuck at 67% updating for 25 minutes and then it went to login. it can come back to haunt me to prevent login to my windows 8. need some help to find what went wrong

A:Group policy prevents you login after update

Hi roodap :)

This error should be logged in the Event Viewer, under Windows logs, Applications. You can find the Event Viewer by right-clicking on Computer and selecting Manage. From there, look for an error that is related to NETLOGON or Group Policy Object.

Read other 1 answers
RELEVANCY SCORE 77.6

hi,
will there be any security risks if i add "NT authenticated users" group into the local admin group of all the workstations in my windows 2000 domain ?

pls advice, thanks.
 

A:win2k admin group

Sure, everyone with a logon to the domain will be an admin. They'll all have full control. What is the purpose of everyone as admin? Can you do it with superuser, if not, perhaps you could create a new group, if the default ones don't do what you need.
 

Read other 2 answers
RELEVANCY SCORE 77.6

I am trying to download Adobe Digital Editions and I keep receiving the error message

Unable to elevate to administrative rights, error 786

I am the admin! I have turned off the password, I have right clicked on the program and chosen 'run as admin'-then nothing happens.
Any help would be appreciated

A:"Unable to elevate to admin rights" error, when admin user

Try this:




Quote:
SOLUTION: download the setup.exe for ADE, not using the flash install version.

Before you run it, right click on it and check "run as administrator" under the compatability tab. Also under the general tab I clicked on "unblock," which might have made a difference.


From a similar issue: https://forums.adobe.com/thread/953278?tstart=0

Read other 1 answers
RELEVANCY SCORE 77.2

Hello,

My company went out of business, and gave me a laptop (HP 8440W) running Win 7 Professional 64 bit SP1. So the domain no longer exists obviously. Windows 7 hasn't updated in over 18 months because of that. SP1 is the last major update.

How do I bypass or update this? Can I disable the group policy somehow on the laptop to allow for automatic updating?

Or, should do I create a new login perhaps, and move all my files from the old domain login to this new login?

Thanks!

A:Can't update due to old netword admin policy

The installed Key is a probably KMS Volume License Key - which is not available to the general public.
It requires re-activation at least every 180 days at a private server owned by the License-holder.

For which version and edition of Windows is the machine licensed, according to the COA sticker on the case?

You should probably reformat and reinstall using genuine media, whatever the result we can achieve here.

Read other 1 answers
RELEVANCY SCORE 76.8

We have been getting loads of support calls with the following error, "The group policy service failed the login".  These so far have been Windows 7 machines, 64-bit.
So we have been telling them to hold down their power buttons for 15 seconds to force off the machine.  Turn it back on and then they seem fine.  If we just tell them to restart their machine, most people push the power button once and then it
goes to sleep.  Then when they turn it on it goes to "resuming windows" and they have the same problem.  Hence the need to cold boot it.

But this is getting crazy, almost every Windows 7 computer in the org is doing it.  The only difference is this weeks patches.  Anyone else experience this from the March Cumulative Windows 7 64-bit update?
I know the march updates wiped out some static IP's on a few Server 2008 R2 machines, so we pulled (DECLINED) the Windows Server 2008 R2 March updates.

Read other answers
RELEVANCY SCORE 76.8

One of my relatives recently got a computer with vista on it. Recently we changed the account to an admistrator. Since then, everytime we try to login, we get an error:
The Group Policy Client server failed the login.
after clicking <OK>
it logs off, bringing you back to the user accounts.

because its the only account, we cant get past this point.
anyone have any advice?

Safe mode does not work, as far as i know...
what should i do?

Read other answers
RELEVANCY SCORE 76.8

My computer won't let me sign in. It makes it to the logon screen, type in my password, and it tells me "Group Policy Client Server failed the login", then restarts.

A:group policy client service failed the login

Same problem after installing Norton 360 with a tech. Go to safe mode, create another user, take admin privileges from your old account and add to the new one. I called my GroupPolicyClient. You can then get in, but you can't access things like email. At least I can get to my files, since I write documents for a living.

A work around, but does not fix the problem.

Anyone have a simple answer?

Read other 1 answers
RELEVANCY SCORE 76.8

I need help.

im trying to delete 2 files, when i try to send it to the recycle bin it says

'' You need to confirm this operation'' then i press continue then UAC comes up i click continue again. It starts deleting then it says


''Destination Folder access Denied''
'' You need permission to perform this action''

i click try again

same thing..

i'm an Administrator on my computer, but it still wont delete

please help me!

A:Help! Cant delete a file when im in an admin group!!

That message usually refers to the "FROM" file. Can you delete other files and send them to recycle?

What are the full paths and filenames you want deleted?

jcgriff2

Read other 7 answers
RELEVANCY SCORE 76.8

Hi, I have 2 XP machines using SP2, what I am trying to do is use the remote user function of perfect disk 7.0 so that I can defrag my other computer from my main computer. The computers are networked correctly, sharing works and the like. But when I try to access perfect disk on computer 2 it tells me I do not have permission to access the program, and that I need to be a member of the admin group. Could someone please explaine to me what I need to do to add computer 1 to the admin group of computer 2, or give me a link to a web page that will explaine it. Thank you

If this post is not in the right place, could a admin move it for me...thanks
 

A:Add remote user to admin group

Double Post. Please refrain from doing this.
http://forums.techguy.org/showthread.php?t=429876
 

Read other 1 answers
RELEVANCY SCORE 76.8

Hi guys,
Iíve a question regarding local admin group management.
Suppose a user is responsible for managing some application installed on a server. The user doesnít normally need to change server configuration like IP address, time settings and so (i.e. privileges).
For Microsoft applications like SharePoint or for servers like IIS I can use the preconfigured groups. But suppose weíre talking about some third party application and I canít know for sure what kind of access the user need.
Maybe the user need to install something and thus require modify permission to some files also the installation may need to change some registry values and configure services.
For example, one of the application owners in my organization needs to connect some constructor to perform some maintenance on a server. Of course I can limit his access but what if he need perform installation of software or change some registry? In any case the application owner will have to find some system administrator to connect him with the needed level of access.
So as we can see I need to find a way to combine permissions and privileges.
My question is what is the correct approach in this situation?

1. Are there any best practices or guide lines for this issue? Iíve searched many forums but wasnít able find some clear approach and best practices.
2. Is it acceptable to give application owner or developers local admin permissions? Maybe itís the way to go and Iím wasting my time here.
3. What is the co... Read more

A:local admin group management

A developer would only have admni rights to a test server in a test network where he can try out his application. Then when the application is ready, he writes the procedures down and hand it over to the IT admin who handle all administration of the application on the live serer.
 

Read other 1 answers
RELEVANCY SCORE 76.8

We have a testing room with computers in it for people to take on. The computer auto logs on to a testing profile which is on the admin group on a domain. This computer was getting a F4 BSOD on log on. The computer would not blue screen in safemode with networking. I disabled all start up service and non-microsoft services and still got the BSOD. I deleted the group and added it again and still getting BSOD. I reloaded windows 7 twice and still the same results. I disabled the auto-logon and logged into my workstation account and there was no bluescreen. No other computers in the room have this issue with the same software on them. I went to the testing room and pulled a different computer out of the room and brought it back to my area. I put the hard drive from the good computer and put it in the BSOD system and it booted fine in the testing account. I put the BSOD hard drive in the new system and the BSOD stil happened on the good system. Only thing I can say is somehow the hard drive is causing this. It is going to be hell to convince DELL to replace the hard drive. Anyone else have this issue?
 

A:Solved: BSOD on a admin group

Ok the problem was the administrator took the machine out of the proper OU to test something and didn't put it back in its proper OU. I chatted with him and once he returned it, I updated the group policy and it works again.
 

Read other 1 answers
RELEVANCY SCORE 76

Hi,
I was playing around with local group policy with smart card settings, and I checked "Force smart card login". I never set up smart card certificates to be used, and don't have any smart cards for it to work with. I need to login to the computer, but when I try, it says "You must insert a smart card to login". I am using the local administrator account, and tried a few ways to bypass it including;
safe mode
disabling smart card in BIOS
remote desktop

When I go home, I will try using ERD commander, and windows recovery console to stop the smart card service. BTW I am using TinyXP rev.05

Thanks!
 

Read other answers
RELEVANCY SCORE 76

System:  Windows 7 Home Premium, 64 bit, SP1
ASUS laptop K52F
This evening I installed the following Windows updates:
  KB3080079
  KB915597
Then when I logged in to an Administrator account, the login was very slow and I saw the message "Wait for group policy client". So I rebooted and again logged into an Administrator account. The message still appeared and the login was very slow. I do not remember ever seeing this message prior to the above updates.
So I tried two experiments:
(Experiment 1) Disconnected from the Internet, rebooted, & logged in to an Administrator account. The message no longer appeared. I tried this 2 times - no message.
(Experiment 2) Connected to the Internet, rebooted, & logged in to an Administrator account. The message no longer appeared. I tried this 2 times - no message.
HUH? Why did the message disappear? Why did it even appear in the first place?
Please tell me:
(1) Explain the above if you can
(2) Purpose of the "group policy client"
(3) If the only computer I have is this laptop, is the group policy client service needed? Can this service be shut off?
Thank you.

A:Windows 7 login was slow - "wait for group policy client"

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post. 
Louis

Read other 9 answers
RELEVANCY SCORE 76

I work in a primary school and our new Windows 8.1 machines have an issue where users (everyone has roaming profiles) that are logging onto the machine for the first time won't end up with the correct 'group policy applied' proxy settings.

The (group policy / registry preferences) proxy settings I want the different groups of users to have *are* being applied (verified using process monitor) but I can then see something else (still in the same svchost process) is then taking the ones configured
for the local system account (in HKEY_USERS\.Default) and overwriting them. Different user groups use different proxy ports for filtering reasons, so it's crucial the right groups of users get the right settings.

Whatever is overwriting them, when the user has no cached roaming profile on the machine, does not do it again if they log off and then on again. The problem being, users don't have a set machine and the cached roaming profiles are removed when the machine
shuts down using an updated version of delprof... so when the machine boots up again, it's like the users are all logging on for the first time - except they have roaming profiles so they aren't really!

Having spent far too long looking into the issue, I'm as positive as I can be that it's nothing I'm doing and we do not have any issue with the same settings / policies being applied on our Windows 7 or old XP machines. Group policy configures the user's
proxy settings and nothing else touches them.

So what ... Read more

Read other answers
RELEVANCY SCORE 76

My brother lives in Australia and he has a work computer. They must have him as a regular user with out admin permission. He is trying to download skype, msn IM without any luck. It says he must be part of the admin group, access denied. Is there anyway to change the permissions to download these programs and then change back once done. I don't want to get him in trouble, but It sucks that we can't talk on skype. Any ideas.
 

A:Access Denied - not part of the admin group!

Read other 6 answers
RELEVANCY SCORE 76

Hi
I have a stand alone computer in a work group,
I am looking for some windows script that will let me to
add a non-admin user(Standard User) to admin group from within Standard User
logon session.

Any help will be greately appriciated

Thanks
Sai
 

Read other answers
RELEVANCY SCORE 76

Hi all..

We have unfortunately just ended up with our first Vista machine here at work and 30 mins into my setup Ive already run into a question..

Dell, Vista Business, joined into our domain

Having googled around a bunch, I understand that the local admin account is disabled upon install.

I found a tip that recommended running cmd as admin and
net user administrator password
net user administrator activate:yes

I performed this, got command successful returned from both.. but when I try to login as <compname>\Administrator @ the login, or try to use the same to perform any tasks on the system I get denied and am told bad user or pw.

I ran user setup as domain admin and confirmed that my local user account is part of the administrator group... found that the local Administrator account was still set as disabled, so I cleared the disabled checkbox.. Im too paranoid to use "Set password" however in case my prior password did somehow work (it doesnt appear to have) and by then Setting Password I'd be screwing my admin account of its encrypted files (do I even have any if the accounts never been logged into?)

Yknow what started all this? Trying to delete Adobe Speed Launcher and Dell Network Manager from the Startup in the start menu.. 'cause god forbid I do that without being a bloody domain admin.

Suggestions as to why my local user account (lets call it bob) can't do any admin functions though Im part of Adminstrators group locally? What ... Read more

A:Local admin group accounts in a domain etc.

Why fight the system? Use an account other than the "Administrator" account. It would appear Vista just isn't designed for that to be a user account.
 

Read other 2 answers
RELEVANCY SCORE 76

†I joined my Windows 7 computer to my 2003 domain. The group Domain Admins was added to local Administrators group as it should but I still do not seem to have full access rights to the computer when logging on with an account that is a member of the Domain Admins group. For example I cannot access the c:\documents and settings folder. I also cannot install software remotely, ie.. virus software deployment. †I recieve an error staing that I must use an account that is part of the administrators group. Any idea why domain admin rights are not being honored.

A:Domain admin group denied access

Windows 7 works the same way as Windows Vista. Administrator accounts do not normally run with administrator privileges until you elevate whatever process needs administrator privileges. C:\Documents and Settings is a junction not a folder. It is for comaptibility purposes and can't be accessed by normal methods. There is no need to access it as it is just a pointer to the real location of the files C:\Users.I suggest you do some reading on the differences between Vista and XP. For the most part everything you read about Vista is applicable to Windows 7.http://technet.microsoft.com/en-us/library/cc709691.aspxhttp://download.microsoft.com/download/5/7/8/578cbb95-c42e-4b9f-9989-93ffdeae8af4/Introducing_Windows_Vista.pdfhttp://technet.microsoft.com/en-us/windows/aa904820.aspxThe above links will get you started. I recommend you install Vista on your own computer and learn it inside out. It has many advantages over older versions of Windows, especially in a domain environment. It is however very different from XP. It bears repeating that whatever you learn about Vista will apply to Windows 7.

Kerry Brown MS-MVP - Windows Desktop Experience

Read other 4 answers
RELEVANCY SCORE 76

Hello,

I'm running win xp pro (with service pack 1) and I'm an Administrator on the machine (i.e. part of Administrators group). One issue that I'm having is that whenever I boot up the machine - it doesn't keep the name of the last logged in user (i.e. me). I've googled around and found that this setting can be accessed via gpedit.msc:
Computer configuration -> Windows Settings -> Local Policies -> Security Options -> "Interactive logon: Do not display last user name" which is set to "Enabled"
When I try to change the above property - I get a grayed out window which doesn't allow me to change it. What I'm wondering is how do I enable the ability to change this property within gpedit.msc

Now one natural question is whether I'm "really" an admin on the system. I've checked and re-checked that I'm part of Administrators group. I also can change things like the Autoplay option via gpedit.msc without a problem (Computer Configuration -> Administrative Templates -> System -> "Turn off Autoplay" property).

So my question is - how do I enable complete property edit throughout gpedit.msc? (is there some registry setting or something else)
I've looked around google and the hits I've gotten were about how to use gpedit.msc to change properties but not how to deal with this kind of restriction.

Any info and help would be greatly appreciated.

El

A:gpedit.msc - I'm in admin group but I can't change certain properties...

The only thing I can think is that someone enabled this policy directly through Regedit, and this is causing gpedit not to recognize/allow policy change. You may want to look up on Google the specific key/value required by this policy and change it via regedit.

BMR777

Read other 1 answers
RELEVANCY SCORE 76

Okay we have a problem I am trying to automate... The issue is our users are NOT Administrators on their machines. Wooohooo you say... Well I do too in most instances. In all this is a plus but, it does not help us when we have to remote desktop into these machines and then do something as the particular user.

Here is what I have envisoned so far -

@echo off
SET /P comp=[Type Computer Name/IP Here]
SET /P user=[Type User Name Name]
:add user to local admins group
mstsc.exe /v:%comp% /f
pause
:remote user from local admins group
:Verify Admins group settings.

The problem with this script is I am not sure what command line functions would be used to display out a remote computers local group. Also I don't know of a command that will remotely add a domain user to a remote machines local group as well as remove them. Really all items with the : in front I am a little unsure of.

Basically I am trying to automate a process of -

Having the user log off - opening the MMC connecting to another computer, adding in the user, opening remote desktop, doing the work and then removing the user from the group and then doublechecking to make sure the user is gone (this last part is imperitive as we have had some machines with the local users left in the admins group and we want to avoid it).

I was thinking a net command may work like net group or net users but nothing I have come across in the way of switches are setup for remote connection...

Any thoughts?
 

A:Add User to local Admin group temporarily.

Read other 8 answers
RELEVANCY SCORE 75.6

I've been given an old work PC (Windows 7 Pro) and I'm trying to remove the password for my user account. My account has admin status and as I understand it I need to disable the "Password must meet complexity requirements" under password policy but I don't have access. Here's what I see: http://i.imgur.com/ZwR5Be8.png

Does anyone know a way around this? I tried to log in on the Administrator account as well but it made no difference... Thanks!

A:Unable to change the Account Password Policy as an admin.

Hello and welcome furtwangler I have been using some old education department machines and sometimes you can find this info out in the BIOS - have you had a look it there.


I found that the machines I worked on were set up in a very convoluted manner too.

Read other 2 answers