The Group Policy Client Service Failed the Logon [Fixed]

Windows 10 users may face different types of errors while trying to login to the user account. One such error is The group policy client service failed the logon. Access is denied while trying to log into your user account.

Strangely enough, the error does not occur when the user tries to login with an administrator account. If you are facing a similar error, here are a couple of ways to fix this error on Windows 10 systems.

How do I fix denied group policy client service logon access?

1. Restore your PC to an earlier point

1. Type Restore Point in search/Cortana and open Create a Restore Point option.
   
2. Click on the System Restore button.
3. Select Choose a different system restore point option.
   
4. Click on Show more restore points option.
5. Select one of the restore points listed and click on Next.
   
   
6. Click on the Finish button to initiate the System Restore process.

Windows will restore the system to the selected Restore Point and probably fix the login error.

Additionally, to ensure that everything works properly, we recommend using a system optimization tool to scan your device.

2. Use admin account to edit the registry

1. Login to your PC using the administrator account.
2. Press Windows Key + R to open Run dialogue box.
3. Type regedit and hit enter / OK to open the Registry Editor.
   
4. In the Registry Editor, navigate to the following location. You can copy and paste the path directly in the registry editor as well.
   HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesgpsvc
5. Here you don’t need to modify anything but make sure the key exists.
6. If it does, navigate to the following location:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSvchost
7. Right-click on Svchost. Go to New > Multi-String Value.
   
8. Right-click on the new value, select Rename and rename it as  GPSvcGroup.
   
   
9. Double-click on GPSvcGroup and enter GPSvc as Value data. Click OK.

Next, you need to create a new key (Folder) under SVcHost key. Follow these steps do the same.

1. Right-click on SVCHost, select New > Key. Rename it as GPSvcGroup.
   
   
2. Click on the GPSvcGroup folder and create two DWORD value.
   
3. Right-click in the right pane and select New > DWORD (32-bit) Value. Rename it as AuthenticationCapabilities.
   
   
4. Double-click on the DWORD value and enter 12320 as the Data value. Click OK. Make sure you select the Decimal option (set to Hexadecimal by default).
5. Right-click again and select New > DWORD (32-bit) Value.
6. Rename it as CoInitializeSecurityParam. Double-click on the value and enter 1 in Value Data.
7. Close the Registry Editor and restart your PC.

After the restart, you should be able to log in to your Windows 10 standard account without any issues.

3. Take ownership of GPSvc key in the registry editor

1. Press Windows Key + R. Type regedit and hit enter.
2. In the Registry Editor, navigate to the following location:
   HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesgpsvc
3. Right-click on the GPSvc key and select Permissions.
   
   
4. Click on the Advanced button.
   
5. The owner should be System or TrustedInstaller by default. Click on the Change link.
   
6. In the Select User or Group window, type the user account name that is not allowing you to log in. Click on Check names to find the user account.
   
7. If found, click OK to save the changes.
8. Next, right-click on the Start button and select Windows PowerShell (admin).
   
   
9. In the PowerShell Admin window, copy and paste the following line of code and hit enter:reg add “HKLMSYSTEMCurrentControlSetServicesgpsvc” /v Type /t REG_DWORD /d 0x10 /f

That’s it. Once you have successfully changed the user permission for the GPSvc key in the registry editor, close the permission window and the registry editor.

Restart your PC to apply the changes. Try to log in using the standard account. Check if the group policy client service failed. The login error is resolved.

4. Restart Group Policy service

1. Press Windows + R to open the Run dialogue box.
2. Type services.msc and hit enter.
   
3. In the Services window, look for Group Policy Client.
4. Right-click on Group Policy Client and select Properties.
5. Change the Startup type to Automatic.
6. Click Apply and click OK to save the changes.
7. Close the Services window and restart your PC.

5. Reset network adapter using PowerShell

1. Right-click on Start and select Windows PowerShell (admin).
   
   
2. In the PowerShell window type the following command and hit Enter:
   netsh winsock reset

Close the Powershell window and restart your PC.

There you go, these are some solutions that you might want to try if you’re getting The group policy client service failed the logon Access is denied error message.

In case you have additional issues, you can say goodbye to SAP GUI’s Logon Balancing Error 88 with our comprehensive guide.

This isn’t the only problem you can encounter with Group Policy, and we wrote about Please wait for the GPSVC message in one of our other guides.

If our solutions worked for you, please let us know by using the comments section below.