Skip to content
This article will show you how to fix "The Group Policy Client service failed the logon. Access is denied." error while signing in to Windows 10/8.1/8/7.

Group Policy Client service (GPSvc) is one of those services which should be running in background while logging in. If it is not running or is missing, standard users will no longer be able to sign-in.

Under this condition, users may see following message just after they input their login credentials:

The Group Policy Client service failed the logon.

Access is denied.

FIX The Group Policy Client Service Failed The Logon Access Is Denied Windows 10

If you’re the system administrator where users are facing this problem, you can correct it using below mentioned registry manipulation. Note that, this solution requires a secondary account (must be administrator) to fix the issue. If you’re on a system with only one account and that is not admin as well, try this fix instead.

FIX: The Group Policy Client Service Failed The Logon. Access Is Denied.

Registry Disclaimer: The further steps will involve registry manipulation. Making mistakes while manipulating registry could affect your system adversely. So be careful while editing registry entries and create a System Restore point first.

1. Press W8K + R and put regedit in Run dialog box to open Registry Editor (if you’re not familiar with Registry Editor, then click here). Click OK.

Windows 10 Registry Editor

2. In left pane, navigate to following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost

FIX The Group Policy Client Service Failed The Logon Access Is Denied Windows 10

3. Now in right pane of Svchost registry key, look for registry string (REG_MULTI_SZ) named netsvcs. Double click on it to modify its Value data.

FIX The Group Policy Client Service Failed The Logon Access Is Denied Windows 10

4. In the Value data, make sure gpsvc term exists. If it is missing, simply add it in new line, without disturbing existing terms. Click OK.

5. Then create a new registry sub-key to Svchost registry key and name it as GPSvcGroup.

6. In the right pane of GPSvcGroup registry key (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\GPSvcGroup), create two new registry DWORDs (REG_DWORD) named AuthenticationCapabilities and ColnitializeSecurityParam.

FIX The Group Policy Client Service Failed The Logon Access Is Denied Windows 10

7. Double click on AuthenticationCapabilities registry DWORD and choose Decimal base. Type Value data as 12320 and click OK.

FIX The Group Policy Client Service Failed The Logon Access Is Denied Windows 10

8. Then set the ColnitializeSecurityParam registry DWORD to Value data 1. Close Registry Editor and reboot to make changes effective.

After restarting your system, the issue will be resolved.

Hope this helps!

Related posts:

1. Group Policy Client Service failed the sign-in. The universal unique identifier (UUID) type is not supported.

2. Windows couldn’t connect to the Group Policy Client service. Please consult your system administrator.

Share this post on Facebook · Twitter.

Leave a Reply

Your email address will not be published. Required fields are marked *

Recent Comments

  • Kapil Arya : ^^ This is because volume 'C' and volume 'D' are on different disks....

    20 hours ago

  • Kapil Arya : ^^ Happy to help Olga!...

    20 hours ago

  • bassem : it didn't work...

    2 days ago

  • Olga : This did in fact fix the problem. Thank you very much for sharing this...

    2 days ago

  • Bilal Agha : Thanks Kapil you made it so simple for me & now my computer is boo...

    2 days ago