Solved

Windows 7:  "The group policy service failed the logon."

Posted on 2010-08-16
5
1,262 Views
Last Modified: 2012-05-10
We've been testing Windows 7 for deployment in our domain and have been having random and sporadic problems with this error.  Randomly a user will attempt to login to their computer and after a long wait they will receive this error.  Clicking OK they will then have to sit for an extended time, 2 to 20 minutes, with the "Logging off" message, which will return them to the log-in screen.  Most times they can immediately re-key in their password and they will logon normally with no intervention.  There are no events logged to the event logs, and there does not seem to be any pattern to the user, computers, time of day, or any of the other usual suspects.

0
Comment
Question by:jim_cook87
  • 3
  • 2
5 Comments
 
LVL 9

Accepted Solution

by:
authen-tech earned 500 total points
ID: 33451404
Seems to be a networking error.  I've seen this on Windows 7 laptops that are booting up and haven't had time to access the wireless network by the time you try to log in.  Also could be an Active Directory authentication error where the DNS is pointed to a machine that is unable to authenticate, or DNS is somehow otherwise incorrect.  Maybe staticly pointed to an outside server.

Hope this helps point you in the right direction!

Todd
0
 

Author Comment

by:jim_cook87
ID: 33489307
We're not seeing any network errors.  The problem occurs on hardwired desktops as often as a laptop that is on the wireless.  And we have implemented the policy to always wait for the network at computer startup and logon.  And we've seen the problem occur on computers that have been sitting at the logon screen for 5, 10, even15 minutes after having been booted up as frequently as on computers that just reached the logon screen

And we find no issues with DNS entries or servers exhibiting issues providing authentication services.
0
 
LVL 9

Expert Comment

by:authen-tech
ID: 33489364
Any chance you are using Norton?  Seems to be a common denominator for my brief search.  I hate Norton.  

One possible fix I found:

-Go to \HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\ProfileList\

-Select the Profile that is having problem and rename the Guid to
GUID1

-Close out of Regedit

-Logoff

-Then login with the user that was having the problem


Another user identified it as a raming profile error and did this:
remove the users cached profiles from the local hard drive c:\users\%usernname%.

0
 

Author Comment

by:jim_cook87
ID: 33505488
No Norton in the environment.

Everything I came across regarding the registry edit and/or deleting the cached profiles related to problems where the specific user was unable to log on at all.  In our situation, the user gets the error once, then in almost every case a second attempt at logging on suceeds.  In every case, without deleting the profile or registry keys they can eventually logon successfully.

But, despite it seemingly not applying to our circumstance, we have tried deleting local profiles and even gone so far as to delete the roaming profile from the network as well.  But the error inevitably returns...
0
 

Author Closing Comment

by:jim_cook87
ID: 33583746
The NIC on one of our DNS servers failed late last week.  Since replacing the NIC all the problems have vanished, so we suspect that DNS server's NIC may have been causing some very sporadic problems for quite some time before finally outright failing.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
acrobat scan error 4 46
Disk Full 16 65
cant install rsat on win 7 13 43
moving files on usb stick 3 47
First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now