The group policy client service failed the logon [Fixed]

Tashreef Shareef
by Tashreef Shareef
Windows & Software Expert
Last update:
Affiliate Disclosure

  • Can't sign in to your Windows 10 account due to a Group policy client service logon error?
  • You might also notice that the error doesn't occur when logging in with an admin account. 
  • Restoring all device services with a dedicated software as recommended below should help greatly.
  • Also, taking ownership of the GPSvc key in the registry editor is a solution.
group policy client service failed the logon
To fix various PC problems, we recommend DriverFix: This software will keep your drivers up and running, thus keeping you safe from common computer errors and hardware failure. Check all your drivers now in 3 easy steps:
  1. Download DriverFix (verified download file).
  2. Click Start Scan to find all problematic drivers.
  3. Click Update Drivers to get new versions and avoid system malfunctionings.
  • DriverFix has been downloaded by 0 readers this month.

Windows 10 users may face different types of errors while trying to login to the user account. One such error is The group policy client service failed the logon. Access is denied while trying to login into your user account.

Strangely enough, the error does not occur when the user tries to login with an administrator account. If you are facing a similar error, here are a couple of ways to fix this error on Windows 10 systems.

How do I fix denied group policy client service logon access?

  1. Restore your PC to an earlier point
  2. Use admin account to edit the registry
  3. Take ownership of GPSvc key in the registry editor
  4. Restart Group Policy service
  5. Reset network adapter using Powershell

1. Restore your PC to an earlier point

  1. Type Restore Point in search/Cortana and open Create a Restore Point option.
    system restore main window The group policy client service failed the logon
  2. Click on the System Restore button.
  3. Select Choose a different system restore point option.
    System Restore Point Select The group policy client service failed the logon
  4. Click on Show more restore points option.
  5. Select one of the restore points listed and click on Next.
    Confirm your System Restore point
  6. Click on the Finish button to initiate the System Restore process.

Windows will restore the system to the selected Restore Point and most probably fix the logon error as well.

Additionally, to make sure that everything works properly, our recommendation is to also use a system optimization tool like Restoro, to scan your device.

Restoro will replace missing or corrupted files (if any), free disk space and restore your PC to its optimal performance with just a few clicks. No technical knowledge is required, as the tool will do everything.

Restoro

Restoro

Easy process optimization for your device that will ensure all essential services are working as they should.
Free downloadVisit website

2. Use admin account to edit the registry

  1. Login to your PC using the administrator account.
  2. Press Windows Key + R to open Run dialogue box.
  3. Type regedit and hit enter / OK to open the Registry Editor.
    registry editor Group policy client service failed logon Registry Editor 1
  4. In the Registry Editor, navigate to the following location. You can copy and paste the path directly in the registry editor as well.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gpsvc
  5. Here you don’t need to modify anything but make sure the key exists.
  6. If it does, navigate to the following location:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
  7. Right-click on Svchost. Go to New > Multi-String Value.
    SCVCgroup - new Multi-string value The group policy client service failed the logon
  8. Right-click on the new value, select Rename and rename it as  GPSvcGroup.
    Edit Multi-string value data The group policy client service failed the logon
  9. Double-click on GPSvcGroup and enter GPSvc as Value data. Click OK.

Next, you need to create a new key (Folder) under SVcHost key. Follow these steps do the same.

  1. Right-click on SVCHost, select New > Key. Rename it as GPSvcGroup.
    New - Key - Regedit The group policy client service failed the logon
  2. Click on the GPSvcGroup folder and create two DWORD value.
    new DWORD 32-bit value The group policy client service failed the logon
  3. Right-click in the right pane and select New > DWORD (32-bit) Value. Rename it as AuthenticationCapabilities.
    Edit DWORD value authenticationCapatibilities
  4. Double-click on the DWORD value and enter 12320 as the Data value. Click OK. Make sure you select the Decimal option (set to Hexadecimal by default).
  5. Right-click again and select New > DWORD (32-bit) Value.
  6. Rename it as CoInitializeSecurityParam. Double-click on the value and enter 1 in Value Data.D-word value colinitializesecurityparam 2 The group policy client service failed the logon
  7. Close the Registry Editor and restart your PC.

After the restart, you should be able to login to your Windows 10 standard account without any issues.


If any error pops up when trying to enter a new registry value, check out this 3-step guide


3. Take ownership of GPSvc key in the registry editor

  1. Press Windows Key + R. Type regedit and hit enter.
  2. In the Registry Editor, navigate to the following location:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gpsvc
  3. Right-click on the GPSvc key and select Permissions.
    GPSvc permissions regedit The group policy client service failed the logon
  4. Click on the Advanced button.
    GPSvc Change permission owner Advanced The group policy client service failed the logon
  5. The owner should be System or TrustedInstaller by default. Click on the Change link.
    GPSvc Change permission owner Advanced - Change owner link The group policy client service failed the logon
  6. In the Select User or Group window, type the user account name that is not allowing you to log in. Click on Check names to find the user account.
    GPSvc Change permission owner Advanced - Change owner link- check name The group policy client service failed the logon
  7. If found, click OK to save the changes.
  8. Next, right-click on the Start button and select Windows PowerShell (admin).
    PowerShell admin DWORD value The group policy client service failed the logon
  9. In the PowerShell Admin window, copy and paste the following line of code and hit enter:reg add “HKLM\SYSTEM\CurrentControlSet\Services\gpsvc” /v Type /t REG_DWORD /d 0x10 /f

That’s it. Once you have successfully changed the user permission for the GPSvc key in the registry editor, close the permission window and the registry editor.

Restart your PC to apply the changes. Try to login using the standard account check if the group policy client service failed the login error is resolved.


4. Restart Group Policy service

  1. Press Windows + R to open the Run dialogue box.
  2. Type services.msc and hit enter.
    Group Policy Client Properties The group policy client service failed the logon
  3. In the Services window, look for Group Policy Client.
  4. Right-click on Group Policy Client and select Properties.
  5. Change the Startup type to Automatic.
  6. Click Apply and click OK to save the changes.
  7. Close the Services window and restart your PC.

5. Reset network adapter using PowerShell

  1. Right-click on Start and select Windows PowerShell (admin).
    Netsh winsock reset - group policy client failed to logon
  2. In the PowerShell window type the following command and hit Enter:
    netsh winsock reset

Close the Powershell window and restart your PC.

There you go, these are some solutions that you might want to try if you’re getting The group policy client service failed the logon Access is denied error message.

If our solutions worked for you, feel free to let us know by using the comments section below.

This article covers:Topics:

There are no comments yet. Please leave a comment

add a comment

Leave a Reply

Your email address will not be published. Required fields are marked *