This article will show you how to fix "The Group Policy Client service failed the logon. Access is denied." error while signing in to Windows 10/8.1/8/7.

Group Policy Client service (GPSvc) is one of those services which should be running in background while logging in. If it is not running or is missing, standard users will no longer be able to sign-in.

Under this condition, users may see following message just after they input their login credentials:

The Group Policy Client service failed the logon.

Access is denied.

FIX The Group Policy Client Service Failed The Logon Access Is Denied Windows 10

If you’re the system administrator where users are facing this problem, you can correct it using below mentioned registry manipulation. Note that, this solution requires a secondary account (must be administrator) to fix the issue. If you’re on a system with only one account and that is not admin as well, try this fix instead.

FIX: The Group Policy Client Service Failed The Logon. Access Is Denied.

Registry Disclaimer: The further steps will involve registry manipulation. Making mistakes while manipulating registry could affect your system adversely. So be careful while editing registry entries and create a System Restore point first.

1. Press W8K + R and put regedit in Run dialog box to open Registry Editor (if you’re not familiar with Registry Editor, then click here). Click OK.

Windows 10 Registry Editor

2. In left pane, navigate to following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost

FIX The Group Policy Client Service Failed The Logon Access Is Denied Windows 10

3. Now in right pane of Svchost registry key, look for registry string (REG_MULTI_SZ) named netsvcs. Double click on it to modify its Value data.

FIX The Group Policy Client Service Failed The Logon Access Is Denied Windows 10

4. In the Value data, make sure gpsvc term exists. If it is missing, simply add it in new line, without disturbing existing terms. Click OK.

5. Then create a new registry sub-key to Svchost registry key and name it as GPSvcGroup.

6. In the right pane of GPSvcGroup registry key (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\GPSvcGroup), create two new registry DWORDs (REG_DWORD) named AuthenticationCapabilities and ColnitializeSecurityParam.

FIX The Group Policy Client Service Failed The Logon Access Is Denied Windows 10

7. Double click on AuthenticationCapabilities registry DWORD and choose Decimal base. Type Value data as 12320 and click OK.

FIX The Group Policy Client Service Failed The Logon Access Is Denied Windows 10

8. Then set the ColnitializeSecurityParam registry DWORD to Value data 1. Close Registry Editor and reboot to make changes effective.

After restarting your system, the issue will be resolved.

Hope this helps!

Related posts:

1. Group Policy Client Service failed the sign-in. The universal unique identifier (UUID) type is not supported.

2. Windows couldn’t connect to the Group Policy Client service. Please consult your system administrator.

Share this post on Facebook · Twitter.

2 Comments

  • Hello. My name is Lonnie Davenport II. And I am here with the problem. You see, In Saturday October 19, 2019, I was going on to my house computer to go to my page. But when it said, “The Group Policy Client service has failed to sign-in. Access is Denied”, I was a little upset. But this Sunday, when I went back on the computer to read the instructions to go back to my page, it said, “Error Editing Value”. What shall I do to try this again, if it fails? That’s what I want to know. Thanks

  • Kapil Arya

    ^^ It seems you need to take ownership of Svchost registry key first: https://www.kapilarya.com/how-to-manually-take-ownership-of-registry-key-in-windows-10.

  • Leave a Reply

    Your email address will not be published. Required fields are marked *

    Recent Comments

    • Dave : I have tried all these "fixes". None have done me any good. I have An ...

      2 days ago

    • Bricaro : Thank you so much. This was driving me crazy. It's annoying, that they...

      2 days ago

    • Nikesh : version 1903 (os build 18362.418)...

      3 days ago

    • Kapil Arya : ^^ Run winver command and let me know build number or version n...

      3 days ago