Home TechIT Stuff How to fix the “Could not connect to Group Policy Client service” Error

How to fix the “Could not connect to Group Policy Client service” Error

by padd

Recently a few of our Windows Vista machines have experienced a problem after removing Script Logic Desktop Authority from them, causing non-admin users to not be able to log into the machine.


The message that appears is
“Could not connect to Group Policy Client service. Please consult your system administrator.”
but strangely sometimes manifests as
“Windows could not connect to the system event notification service . Please consult your system administrator.”

After seeing this message, a normal user is dropped back to the Ctrl-Alt-Del logon screen.

This is how you can solve the problem if you are experiencing a similar problem

1. Log on to the machine as administrator
2. click start and into the search box type “Event Viewer” and press enter
3. Look in the Windows Logs under System for any Warnings or Errors. The error message will be something like Windows cannot process Group Policy Client Side Extension (Daci). Exception (in my case it was daci which is part of the script logic desktop authority program)
4. On the details tab, take a note of the GUID for the faulty client side extension
5. click start and into the search box type “regedit” and press enter
6. Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions and then click on the string that represents your faulty GP Extension.
7. click on the file menu and choose export and save a backup of the file.
8. Once the registry is backed up you can delete the folder that corresponds to the GUID
9. Do a restart and log on as a normal user.

Problem solved!

You may also like


Zak 11th November 2012 - 6:25 am

I’m having an issue with this, can i have some help?

Ben 25th November 2012 - 2:44 am

I cannot seem to find the error in the event viewer, the only events related to Group Policy Client are ‘A timeout was reached (30000 milliseconds) while waiting for the Group Policy Client service to connect ‘ and ‘The Group Policy Client service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion ‘
I have tried the GUID for both of these and i can’t find it in the gp extensions section.

Thank You

Alex 16th December 2012 - 4:52 pm

Well I did all that, but the GUIP that gave me is not listed in the regedit.. help me please?

Alex 16th December 2012 - 4:52 pm


Malcolm Birdsall 22nd December 2012 - 2:32 pm

Just to add a note of thanks for this tip. I found the relevant file in a different place in the registry. I copied the event viewer log error GUID into regseeker ( a nice little free program – very helpful at removing traces of applications from the registry as well as some other good features) and removed the folder. Regseeker automatically saves a backup before deletion so there was no need to export the folder.
Thanks again. The problem happened after a microsoft update which changed permissions for its own irritating reasons.

PLX 17th February 2013 - 9:42 am

this problem is solved. I posted it in this thread at microsoft answers. Why won’t windows connect to the group policy client? – Microsoft Community

Also, I posted a video walkthrough here: “Windows cannot connect to Group Policy Client services” how to fix. – YouTube http://youtu.be/4m5KEmckWK4

Tharun Raj 26th March 2013 - 9:55 am

Just watch this video , it ‘ll help .


If you are good in editing Registry , please follow the below step

Go to RUN and type regedit

There are two places to look in the registry:
1.HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services this path should contain gpsvc key (a folder), which is responsible for service parameters and configuration. I found that the key was intact, so, you do not touch anything here – just check that the key exists.
2.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SVCHOST This is the most important path you should look into, as it must contain the keys and values referred in the key #1. Below are descriptions what must be present there.
•There must be Multi-String value called GPSvcGroup. My laptop was missing it. So, you should create multi-string value named GPSvcGroup and assign it value GPSvc.
•Next, you must create a key (a folder) and name it GPSvcGroup – this key normally should be there, but, again, it was missin on my laptop.
•Then open newly-created GPSvcGroup folder and create 2 DWORD values:
1.First called AuthenticationCapabilities and you must give it a value of 0x00003020 (or 12320 in decimal)
2.Second is called CoInitializeSecurityParam and it must have value of 1.

Once you complete all steps above, reboot the computer and the problem will be fixed.

hispi 9th October 2013 - 9:50 am

I found a solution for my case, maybe help others.

In my case i am under a domain.

error : “access denied client network service error in the group policy” when starting windows 7 enterprise 64x

I did a full system recovery of a windows image.

after the windows image when I logon for the first time i can only login with the last password I used to create the image, the rest of the local users are removed, windows didnt recover them.

So what you have to do is the first time you are available to login (if you cant because of user/pass wrong try secure mode + network and the old password) is to create a new local user with full administrator group rights. Change the user (not close session or restart I couldnt login after windows restart) and login with the new user administrator, if it works then you can go the following step.

login with the new local admin and try open cmd in administrator mode and put gpupdate /force. . If it works good restart and try to login with a windows domain account. If it failed go next step.

create a local user but located in the domain you are. to do this go to the user account administration and create new user with the name of your domain. with local admin rights.

now try to login with that user of domain, it should work and do a gpupdate /force again. if it works do the last test by login with other user of domain that does not have login still in the computer.

hope it helps.


Brizzle 9th August 2014 - 6:37 pm

How do you login as an administrator? I can only select my profile

gaze 19th September 2014 - 10:43 am

none pf this tutorials helped me out, I’m really angry I cannot find a freaking fiz for it

Bitdefender prevented essential windows services from starting after Windows Update | Herbjorn's Blog 24th May 2015 - 12:37 pm

[…] The Group policy client service was also unavailable. Due to this my rights to do stuff was very limited. Here is a short blog posts about how to fix that. […]


Leave a Comment

* By using this form you agree with the storage and handling of your data by this website.

This site uses Akismet to reduce spam. Learn how your comment data is processed.