How to fix- The Group Policy Client service failed the logon. Access denied

The Group Policy Client service failed the logon. Access denied

 Many time we  Encounter the  above error -The Group Policy Client service failed the logon. Access denied. this error comes when user profile get corrupted or User profile permission issue.   For that we need to login the system with local system admin.


As per my Experience,  Resolution for this will different for different system. I am just providing in sequence to apply one by one and check. It will 100% work.


1. Enable Inheritance & replace all child object permission with inheritable object
2. Restart Group Policy Service and Reset Winsock
3. Replace NTUSER.DAT with working system
4. Delete user account

1. Enable Inheritance & replace all child object permission with inheritable object

Many Times, There is issue access permission issue to folder and sub folder in user profile for that we need to give permission as parent folder. This best way to give access permission at single to to all by enabling inheritance to folder security

1.1 go to c:\users\%Userprofile%  right click Properties-> security tab

1.2  click advance

1.3 Click Enable Inheritance.  and check the box to replace child object with inheritable permission. If this button is not available, that means that Inheritance is already enabled.

1.4 click yes and continue

 Many times some folder is in use. it will ask for continue. Just click and proceed for continue.

 Now log off and try for login the system with profile having issue. Most of time it work. If it not work then try other method

2. Restart Group Policy Service and Reset Winsock

 Many time by restating the service-Group Policy client

2.1 Go Run( Win+R ) Type services.msc

2.2 Restart the service Group Policy client and Change its Startup type to Automatic, Click on the Start button, and then Apply > OK.

2.3 Now open CMD  as admin Type the  command and hit enter.netsh winsock reset

3. Replace NTUSER.DAT with working system

Now copy the NTUSER.DAT file from other working system or other profile present in system

3.1 File is hidden so you need to enable to show hidden item & file extension. Just go to user profile and view on top and check the box for hidden item.

3.2 Once Hidden item enabled, you will able to see the NTUSER.DAT file at last

3.3. Now copy and past in other user profile having issue. you may copy the same file from other system as well.

4. Delete user account

Note:- Before deleting User Profile you must take backup files. It may leads to data loss after deletion of profile.
Now above all 3 method not work then Last option we have only to delete user Profile

4.1 Go to run type sysdm.cpl and  Advance tab --> User Profile-->settings

 

4.2 In the User Profiles dialog box, select the profile of your affected user account and click on  Delete. 

Now Delete the profile. IT may take time depends on size of  Profile.