Troubleshooting issues with Group Policy processing

The Group Policy Client service failed the sign-in. Access is denied

This error and message is a known issue in previous versions of FSLogix.

Solution

Upgrade to the latest version of FSLogix and review the release notes.

Group Policies are not applied to virtual machines as expected

Group Policy requires the virtual machine has line of sight and can communicate with an Active Directory (AD) domain controller. There are various reason for a virtual machine to lose communication with a domain controller. This article doesn't provide the steps to solve these communications issues. Once communication is restored, the virtual machine should process the Group Policy settings as expected.

Solution

Resolve communication issues between the virtual machine and the AD domain controller(s).

Remote Desktop Services settings are not available in Group Policy Management

Remote Desktop Services policies in Group Policy Management require specific ADMX and ADML files exist in the central store. The files should exist in the central store to configure policies for Remote Desktop Services.

  • C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions\TerminalServer.admx
  • C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions\terminalserver-server.admx
  • C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions\[MUICulture]\TerminalServer.adml
  • C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions\[MUICulture]\terminalserver-server.adml