none
+"Windows could not connect to the group policy client service" RRS feed

  • Question

  • Every now and then, after restart of our terminal servers we get this: "Windows could not connect to the group policy client service". No users can log on and we have to restart the servers once more. Very frustrating and I cannot for my life find out why this is happening. Can someone give me a clue?

    /Robert
    Friday, September 4, 2009 8:07 AM

Answers

  • Hi,

     

    Is Citrix EdgeSight installed? It seems that there is a known issue with Citrix EdgeSight installed and the SP2 for EdgeSight should fix the issue.

     

    Citrix EdgeSight Service 5.0 Service Pack 2

    http://support.citrix.com/article/CTX120625

     

    Thanks.


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Wednesday, September 9, 2009 10:02 AM
    Moderator

All replies

  • I have heard many people complaining about that issue, but that was all before SP2 for Vista/W2K8.
    Do you have the SP2 already installed? Don't know if it was fixed, but MS will always want you to be up to date
    when addressing an issue...

    Am I right that an administrator can log onto the machine, just "normal" users are blocked?
    If yes, when being logged on as admin, try this as a workaround:
    Open command prompt
    Type "netsh"
    Type "winsock reset"

    Log off and try to relogin as regular user.
    Patrick
    Friday, September 4, 2009 10:44 AM
  • I have heard many people complaining about that issue, but that was all before SP2 for Vista/W2K8.
    Do you have the SP2 already installed? Don't know if it was fixed, but MS will always want you to be up to date
    when addressing an issue...

    Am I right that an administrator can log onto the machine, just "normal" users are blocked?
    If yes, when being logged on as admin, try this as a workaround:
    Open command prompt
    Type "netsh"
    Type "winsock reset"

    Log off and try to relogin as regular user.
    Patrick

    We have SP2 installed. Yes you are right an administrator can log on but no users, I assume that they cannot because the group policy service is not working as it should.

    /Robert
    Tuesday, September 8, 2009 2:30 PM
  • Ok, then you are able to try the suggested workaround to help avoiding a second reboot.
    Did you already give it a try?
    Patrick
    Tuesday, September 8, 2009 3:42 PM
  • Hi,

     

    Is Citrix EdgeSight installed? It seems that there is a known issue with Citrix EdgeSight installed and the SP2 for EdgeSight should fix the issue.

     

    Citrix EdgeSight Service 5.0 Service Pack 2

    http://support.citrix.com/article/CTX120625

     

    Thanks.


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Wednesday, September 9, 2009 10:02 AM
    Moderator
  • Hi,

     

    Is Citrix EdgeSight installed? It seems that there is a known issue with Citrix EdgeSight installed and the SP2 for EdgeSight should fix the issue.

     

    Citrix EdgeSight Service 5.0 Service Pack 2

    http://support.citrix.com/article/CTX120625

     

    Thanks.


    This posting is provided "AS IS" with no warranties, and confers no rights.

    In fact we have. I am going to investigate further if we have uppgraded to SP 2 or not. Thank you.

    /Robert
    Friday, September 11, 2009 11:27 AM
  • I already posted solution in other threads. It looks like a very wide-spread issue caused by crash during reboot initiated by Windows Update.  I am re-posting here, I am pretty sure this will fix your problem.

    I had this issue on my laptop since November, and it really bugged me.  I sifted through the event log and found the pattern of events that preceded the issue, and, probably, caused it.

    In short, the pattern is as follows: Windows updates run automatically as scheduled, and when reboot is initiated after the updates are finished, the computer crashes (probably during reboot sequence).  When it boots up, it reports that the last shutdown was unexpected, and the issue begins to occur.

    I spent 2 days trying to dig out a solution from the Internet, to no avail, until I came across this page.  It doesn't say anything about this particular problem, but it gives more information about SVCHOST process that starts many services, including Group Policy Client.  It looks like during reboot a vital registry settings were lost during crash and Group Policy Client "doesn't know" how to start.  Let me explain:

    There are two places to look in the registry:

    1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services this path should contain gpsvc key (a folder), which is responsible for service parameters and configuration.  I found that the key was intact, so, you do not touch anything here - just check that the key exists.
    2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SVCHOST This is the most important path you should look into, as it must contain the keys and values referred in the key #1.  Below are descriptions what must be present there.
    • There must be Multi-String value called GPSvcGroup. My laptop was missing it.  So, you should create multi-string value named GPSvcGroup and assign it value GPSvc.
    • Next, you must create a key (a folder) and name it GPSvcGroup - this key normally should be there, but, again, it was missin on my laptop.
    • Then open newly-created GPSvcGroup folder and create 2 DWORD values:
    1. First called AuthenticationCapabilities and you must give it a value of 0x00003020 (or 12320 in decimal)
    2. Second is called CoInitializeSecurityParam and it must have value of 1.

    Once you complete all steps above, reboot the computer and the problem will be fixed.

    Here is the link to the video walkthrough if you have any troubles understanding what has to be done: http://youtu.be/4m5KEmckWK4

    I am so relieved I was able to fix it, and hope this will help others with the similar issue.

    • Edited by SQL-ER Monday, February 25, 2013 6:26 PM
    • Proposed as answer by SQL-ER Monday, February 25, 2013 6:32 PM
    Monday, February 25, 2013 6:25 PM
  • Thanks

    this appears to have fixed the issue for me to

    :)

    Monday, March 4, 2013 6:49 AM
  • Thanks, SQL-ER!   That resolved our issue and saved a lot of additional troubleshooting.
    • Edited by Joe D. _ Wednesday, May 1, 2013 7:07 PM
    Wednesday, May 1, 2013 7:07 PM
  • I'm still wondering about that solution - or, to be precise, about the reason for the missing keys and values. I've never seen that to happen in our production or testing environments, and I suspect there's some kind of "registry optimizer" or "bootup speed tuner" involved...

    There's a short list of things not to do: Click on links in unwanted mail, open zip files of unknown origin, run tuneup utilities from whereever they are.

    regards, Martin


    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!

    Wednesday, May 1, 2013 7:35 PM
  • Hi Martin, I understand your curiosity about what makes the keys and values disappear. From my side I can say that I am not running any kind of registry optimizers or boot speed runners. I am pretty conservative and well-versed with my computer configuration and do not run any desktop gadgets or taskbars in browsers. My desktop has a solid color as a background, all windows animations and aero are turned off, my Windows Explorer is configured to show system, hidden files and file extensions and I know the difference between .com and .exe files. :-) I do run Kaspersky for antivirus protection but this is pretty much it for OS modification.

    On my computer I clearly tracked this issue back to the crash that happened after reboot initiated by windows update installation. Many other people in other threads of this web site had confirmed that the issue starts appearing after windows update crash. 

    My thought is that the crash happens during some registry update which makes the key and values disappear. That's the only reasonable explanation I can come up with based on the facts I collected. Mind you, that I experienced the issue on a standalone home computer, not connected to a domain. If your architecture is domain-based and you use WSUS for pushing windows updates, the issue may never appear because of this difference in architecture. Again, this is just my thought.


    • Edited by SQL-ER Friday, May 3, 2013 3:16 AM
    Friday, May 3, 2013 2:56 AM
  • Ok, thanks for clarification.
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Friday, May 3, 2013 6:02 AM
  • This did not work for me, as all the infomation is there when I opened the GPSvcGroup. Do you have any other suggestion as to why it will stop running?

    Thursday, July 10, 2014 4:46 PM
  • Hi,

    This has fixed the issue for us on a domain joined PC. With updates from WSUS. We suspect there might be something in the way the updates are applied in our SCCM build. Like you we don't run any reg tools etc, only Trend AV.

    Michael

    Tuesday, July 15, 2014 12:26 PM
  • Thanks a lot!

    Had all kind of weird issues on my Win 8.1 laptop and this solved it. And I am pretty sure that I would not have figured this out on my own.

    Thursday, January 8, 2015 8:03 AM