Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Group Policy Client service failed

Posted on 2011-05-05
Medium Priority
Last Modified: 2012-05-11
I'm having a problem when users log onto new PC's (ie one not logged onto before) using their roaming profile. It comes up with an error when logging on

The Group Policy Client service failed the logon
Access is denied

If I manually copy over the ntuser.dat file from the roaming profile folder to the local machine then they can log on fine. The only odd thing is that on the server to view the ntuser.dat file I have to unhide the protected system files to then view it and copy it. Then when I log in it loads roaming profile fine.

Has anyone seen this before and know a fix?
Question by:rowdybeans
  • 3
LVL 60

Expert Comment

by:Cliff Galiher
ID: 35701922
I've only see this when someone has done a migration (I've seen it with SBS and non-SBS) where roaming profiles were moved from one server to another and ACLs were not preserved. Because of inheritance, some files fail.

Ultimately you can *try* to reset ACLs, but it is usually better to just export the data (Windows Easy Transfer, etc), delete the roaming profile, and let the windows client recreate it thus recreating all folders and files with proper ACLs.

You can then reimport the data, as tools that work at the data level and not the file level don't affect ACLs.


Author Comment

ID: 35701974
We haven't moved servers or done a migration. The only thing that has happened is we had some corrupt data on our D drive where the data stored. But I have tried deleting the roaming profile data on the server and local PC profile, deleting reg keys for user on local pc too. Recreating a profile for the user and still get the same error.

Accepted Solution

rowdybeans earned 0 total points
ID: 36967506
In the end I removed all the ntuser.dat files from the server and let them be recreated. This fixed the issue.

Author Closing Comment

ID: 36991206
Found my own solution

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question