Skip to main content

The Group Policy Client service failed to logon - Access is denied

·157 words·1 min
system-administration tech group-policy sysadmin technology windows windows-7
James Pettigrove
Author
James Pettigrove
Cloud Engineer with a focus on Microsoft Azure

Access is denied is a truly wonderful error.

On one side of the coin, it’s an error; which automatically makes it bad. You are being prevented in doing some you need to do.

On the other side, it’s very verbose, short, to the point and quickly narrows down where the problem lies.

Permissions… they’re wrong. And in the case of the Group Policy Client service throwing an Access is denied error then you should cast your eye upon the NTFS permissions of the users profile. Whether it be a mandatory profile or a roaming profile, there is a file or whole sections that don’t have the correct permissions applied.

In the case that I came across, the users roaming profile NTUSER.dat file was missing permissions for the user themselves. A quick remove inheritence, copy existing permissions, reinherit permissions from above and the error was banished.

Just like the error, this resolution is short and to the point.

Related

Fix .LNK and .EXE file associations
·361 words·2 mins
system-administration tech malware registry sysadmin technology virus windows windows-7
There are a number of malware out in the wild that like to change the association for .
Tracking User Logins with XML Event Log Filtering
·283 words·2 mins
system-administration tech event-viewer security sysadmin technology windows windows-7 xml
We’ve all been there when we are asked to find out if a certain user logged in to their computer (or logged off).
Certified Part 1
·605 words·3 mins
system-administration tech certification learning mcp mcts microsoft sysadmin technology windows windows-7
As of yesterday I am now a Microsoft Certified Professional (Technology Specialist: Windows 7, Configuration for those keeping score at home).