The Group Policy Client service failed the sign-in

Question

While logging into a domain joined machine, randomly users encountered an error message as shown in the screenshot. Sometimes, rebooting the machine resolves this issue. However, it re-appeasers again

What is the cause of this issue ?

also, tried the below solution.

Sometimes rebooting or deleting the user profile works as a workaround. looking for a permanent solution for it.

Answer 1

Hello, @$@chin !

Why am I getting a "The Group Policy Client service failed the sign-in. Access is denied." error on Azure Virtual Desktop?

This is usually because there is something wrong with the user profile (and would explain why deleting the user profile sometimes works). When a user's session is terminated abruptly and the profile isn't properly detached, the user's next login may not successfully attach. Changing the registry setting for CleanupInvalidSessions enables FSLogix to attempt to clean up these invalid sessions and allow for successful sign-in.

• Registry entry: CleanupInvalidSessions
• Path: HKEY_LOCAL_MACHINE\Software\fslogix\apps\CleanupInvalidSessions
• Type: DWORD
• Value: 1

If that doesn't work, let us know in the comments so we can try some additional troubleshooting as there may be other causes.

Additional information:

• FSLogix Configuration Setting Reference
• Azvise: The Group Policy Client service failed the sign-in. Access is denied – AVD/WVD
• Microsoft Q&A: the group policy client service failed the sign-in access is denied
• Microsoft Q&A: What is the cause of error message "The Group Policy Client Service failed the sign-in. Access is denied" ?
• Documentation: Troubleshooting issues with Group Policy processing
• Reddit: FSLogix RDS "The Group Policy Client Service Failed the Sign-in"

---

I hope this has been helpful! Your feedback is important so please take a moment to accept answers.

If you still have questions, please let us know what is needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

Answer 2

Hi $@chin,

Thank you for posting in the Q&A Forums.

If a user encounters the error message “The Group Policy Client service failed the sign-in” when trying to log on to a computer that is joined to a domain, this may be due to the following reasons:

The Group Policy Client has problems or fails to start properly, which will cause the sign-in to fail.

There may be problems with the Group Policy itself, such as misconfiguration, corrupted Group Policy Objects (GPOs), or communication problems with domain controllers.

User profiles may be corrupted or contain incorrect settings that prevent them from loading properly.

The user account may lack sufficient privileges to access Group Policy settings or other necessary resources.

I noticed that you had a similar problem before, so I think you can repair the user profile by trying to delete the affected user's profile and have the system recreate a new one.

Best regards

Neuvi Jiang

Answer 3

Hello,

See if this fix helps you:

https://www.kapilarya.com/fix-the-group-policy-client-service-failed-the-logon-access-is-denied-windows-10

Let us know if this helps!

Note: Included link in this reply refers to blog post by a trusted Microsoft MVP.