Group Policy Client service failed

Posted on 2011-05-05
Last Modified: 2012-05-11
I'm having a problem when users log onto new PC's (ie one not logged onto before) using their roaming profile. It comes up with an error when logging on

The Group Policy Client service failed the logon
Access is denied

If I manually copy over the ntuser.dat file from the roaming profile folder to the local machine then they can log on fine. The only odd thing is that on the server to view the ntuser.dat file I have to unhide the protected system files to then view it and copy it. Then when I log in it loads roaming profile fine.

Has anyone seen this before and know a fix?
Question by:rowdybeans
    LVL 56

    Expert Comment

    by:Cliff Galiher
    I've only see this when someone has done a migration (I've seen it with SBS and non-SBS) where roaming profiles were moved from one server to another and ACLs were not preserved. Because of inheritance, some files fail.

    Ultimately you can *try* to reset ACLs, but it is usually better to just export the data (Windows Easy Transfer, etc), delete the roaming profile, and let the windows client recreate it thus recreating all folders and files with proper ACLs.

    You can then reimport the data, as tools that work at the data level and not the file level don't affect ACLs.

    LVL 1

    Author Comment

    We haven't moved servers or done a migration. The only thing that has happened is we had some corrupt data on our D drive where the data stored. But I have tried deleting the roaming profile data on the server and local PC profile, deleting reg keys for user on local pc too. Recreating a profile for the user and still get the same error.
    LVL 1

    Accepted Solution

    In the end I removed all the ntuser.dat files from the server and let them be recreated. This fixed the issue.
    LVL 1

    Author Closing Comment

    Found my own solution

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
    I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
    This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
    This tutorial will show how to inventory, catalog, and restore media from legacy versions of Backup Exec into both 2012 and 2014 versions of the software. Select Storage from the tabs along the ribbon bar as the top: Ensure the proper storage devi…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now