Windows OS Hub
  • Windows Server
    • Windows Server 2016
    • Windows Server 2012 R2
    • Windows Server 2012
    • Windows Server 2008 R2
    • SCCM
  • Active Directory
    • Group Policies
  • Windows Clients
    • Windows 10
    • Windows 8
    • Windows 7
    • MS Office
    • Outlook
  • Virtualization
    • VMWare
    • Hyper-V
  • PowerShell
  • Exchange
  • Home
  • About

Windows OS Hub

  • Windows Server
    • Windows Server 2016
    • Windows Server 2012 R2
    • Windows Server 2012
    • Windows Server 2008 R2
    • SCCM
  • Active Directory
    • Group Policies
  • Windows Clients
    • Windows 10
    • Windows 8
    • Windows 7
    • MS Office
    • Outlook
  • Virtualization
    • VMWare
    • Hyper-V
  • PowerShell
  • Exchange

 Windows OS Hub / Windows 10 / Windows Couldn’t Connect to the GPSVC Service

October 26, 2020 Group PoliciesWindows 10Windows Server 2016

Windows Couldn’t Connect to the GPSVC Service

User cannot logon to the computer due to the GPSVC (Group Policy Client service) connection error on one of the computers running Windows 10. When trying to log on with a domain user account, the following error appears:

Windows couldn't connect to the gpsvc service.
Please consult your system administrator.

Windows couldn't connect to the gpsvc service

Windows could not connect to the Group Policy Client service.

At the same time, if you try to logon under a local account with local administrator privileges, you will be authenticated, the Desktop will be displayed, but this pop-up message will appear in the Windows 10 notification bar:

Failed to connect to a Windows Service
Windows couldn’t connect to the Group Policy Client service. This problem prevents standard users from signing in.

Failed to connect to a Windows Service Windows couldn’t connect to the Group Policy Client service. This problem prevents standard users from signing in.

The problem appears because the Group Policy Client service (GPSVC) is not running on the computer. If you open the command prompt and try to start gpsvc manually using the net start gpsvc command, the following error will appear:

System error 5 has occurred.
Access is denied.
The problem occurs if the system image or the registry are damaged, if you set the service permissions using GPO or if user has disabled the Group Policy client service on the computer by changing permissions on the service registry key.

To fix the issue, log on under a local administrator account and change the GPSVC registry keys:

  1. Run the Registry Editor (regedit.exe) and make sure that there are entries for gpsvc in the registry. To do it, go to the reg key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services. Make sure that the gpsvc key exists and has %systemroot%\system32\svchost.exe -k netsvcs –p specified for ImagePath.
    If the service registry key is missing, you can import the service registry key from another computer, or check and repair the Windows image using these commands:
    DISM /Online /Cleanup-Image /RestoreHealth
    sfc /scannow
    gpsvc service registry key
  2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost and make sure that there is GPSvsGroup in the list of the parameters;
  3. If the GPSvsGroup parameter is missing, create it manually. Create a REG_MULTI_SZ parameter with the name GPSvcGroup and the value GPSvc; GPSvsGroup under svchost
  4. Then create a new reg key with the name GPSvcGroup under the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost;
  5. In the new GPSvcGroup branch, create two DWORD (32bit) parameters:
    • AuthenticationCapabilities – value 0x00003020 (12320)
    • CoInitializeSecurityParam – value 0x00000001 (1) GPSvcGroup: AuthenticationCapabilities and CoInitializeSecurityParam parameters
  6. Restart your computer.

You can simply import the following REG file to the registry:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
"GPSvcGroup"=hex(7):47,00,50,00,53,00,76,00,63,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\GPSvcGroup]
"AuthenticationCapabilities"=dword:00003020
"CoInitializeSecurityParam"=dword:00000001

You can check the gpsvc permissions and compare them with those on a computer working normally. You can display current service permissions with this command:

sc sdshow gpsvc

After restarting the computer, the gpsvc connection error will disappear and a user will be successfully logon to Windows 10.

0 comment
0
Facebook Twitter Google + Pinterest
previous post
Configuring High Performance NGINX and PHP-FPM Web Server
next post
Remote Desktop Services Is Currently Busy

Related Reading

How to Sign a PowerShell Script (PS1) with...

February 25, 2021

How to Shadow (Remote Control) a User’s RDP...

February 22, 2021

Configuring PowerShell Script Execution Policy

February 18, 2021

Configuring Proxy Settings on Windows Using Group Policy...

February 17, 2021

Updating Group Policy Settings on Windows Domain Computers

February 16, 2021

Leave a Comment Cancel Reply

Categories

  • Active Directory
  • Group Policies
  • Exchange
  • Windows 10
  • Windows 8
  • Windows 7
  • Windows Server 2016
  • Windows Server 2012 R2
  • Windows Server 2008 R2
  • PowerShell
  • VMWare
  • MS Office

Recent Posts

  • Accessing USB Flash Drive from VMWare ESXi

    February 26, 2021
  • How to Sign a PowerShell Script (PS1) with a Code Signing Certificate?

    February 25, 2021
  • Change the Default Port Number (TCP/1433) for a MS SQL Server Instance

    February 24, 2021
  • How to Shadow (Remote Control) a User’s RDP session on RDS Windows Server 2016/2019?

    February 22, 2021
  • Configuring PowerShell Script Execution Policy

    February 18, 2021
  • Configuring Proxy Settings on Windows Using Group Policy Preferences

    February 17, 2021
  • Updating Group Policy Settings on Windows Domain Computers

    February 16, 2021
  • Managing Administrative Shares (Admin$, IPC$, C$, D$) in Windows 10

    February 11, 2021
  • Packet Monitor (PktMon) – Built-in Packet Sniffer in Windows 10

    February 10, 2021
  • Fixing “Winload.efi is Missing or Contains Errors” in Windows 10

    February 5, 2021

Follow us

woshub.com
  • Facebook
  • Twitter
  • RSS
Popular Posts
  • How to Configure Google Chrome Using Group Policy ADMX Templates?
  • Updating List of Trusted Root Certificates in Windows 10/8.1/7
  • Allow RDP Access to Domain Controller for Non-admin Users
  • How to Show/Hide All User Accounts from Login Screen in Windows 10?
  • Reset Local Group Policy Settings in Windows
  • How to Block USB Drives in Windows using Group Policy?
  • Configuring Proxy Settings on Windows Using Group Policy Preferences
Footer Logo

@2014 - 2018 - Windows OS Hub. All about operating systems for sysadmins


Back To Top