I'm having a problem where when a user logs into a machine they get a popup like the following. It's only happening on one machine and I'd rather not have to wipe it and start fresh if I can avoid it.
When I pull logs I see the following.
Please have a look into below links and these are for your reference:
- "Windows cannot connect to the group policy client service":http://social.technet.microsoft.com/Forums/en/itprovistasecurity/thread/e02a78e1-df44-415f-a2b7-7857c3bd8762
Regards, Ravikumar P
The crash of your computer during Windows Updates may have caused that !
I had this issue on my laptop since November, and it really bugged me. I sifted through the event log and found the pattern of events that preceded the issue, and, probably, caused it.
In short, the pattern is as follows: Windows updates run automatically as scheduled, and when reboot is initiated after the updates are finished, the computer crashes (probably during reboot sequence). When it boots up, it reports that the last shutdown was unexpected, and the issue begins to occur.
I spent 2 days trying to dig out a solution from the Internet, to no avail, until I came across this page. It doesn't say anything about this particular problem, but it gives more information about SVCHOST process that starts many services, including Group Policy Client. It looks like during reboot a vital registry settings were lost during crash and Group Policy Client "don't know" how to start. Let me explain:
There are two places to look in the registry:
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services this path should contain gpsvc key (a folder), which is responsible for service parameters and configuration. I found that the key was intact, so, you do not touch anything here - just check that the key exists.
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SVCHOST This is the most important path you should look into, as it must contain the keys and values referred in the key #1. Below are descriptions what must be present there.
- There must be Multi-String value called GPSvcGroup. My laptop was missing it. So, you should create multi-string value named GPSvcGroup and assign it value GPSvc.
- Next, you must create a key (a folder) and name it GPSvcGroup - this key normally should be there, but, again, it was missin on my laptop.
- Then open newly-created GPSvcGroup folder and create 2 DWORD values:
- First called AuthenticationCapabilities and you must give it a value of 0x00003020 (or 12320 in decimal)
- Second is called CoInitializeSecurityParam and it must have value of 1.
Once you complete all steps above, reboot the computer and the problem will be fixed.
Video walkthrough for those who are not very technical is here: http://youtu.be/4m5KEmckWK4
I am so relieved I was able to fix it, and hope this will help others with the similar issue.
- Proposed as answer by SQL-ER Sunday, February 17, 2013 6:57 PM
- Unproposed as answer by Baron164 Monday, February 25, 2013 12:35 AM
- Edited by SQL-ER Wednesday, February 27, 2013 4:16 PM
- Proposed as answer by SteveS72 Wednesday, June 12, 2013 7:39 AM
- Unproposed as answer by SteveS72 Wednesday, June 12, 2013 7:39 AM
I would start from answering these questions:
- What is the content of ImagePath variable in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Service\gpsvc
- What is the status of Group Policy Client service in services.msc?
- What does System Event Log says about Group Policy Client service at the time of a user log-on?
- Can non-admin users log in?
- Is the computer a part of a domain?
- Are there any group policies defined?
- Edited by SQL-ER Thursday, February 28, 2013 6:56 AM
I, too, want to express my gratitude for sharing your findings on restoring the Group Policy service to a functional state!
My system began acting very strangely and when I finally booted it and went immediately to the Desktop, I saw the error message and found this posting. It corrected all of the strange behaviors that I was seeing and also restored the function of Windows Update, which was hanging on me every time I attempted to start it.
- Edited by BanditoB1 Monday, November 10, 2014 5:05 PM