Windows OS Hub
  • Windows Server
    • Windows Server 2022
    • Windows Server 2019
    • Windows Server 2016
    • Windows Server 2012 R2
    • Windows Server 2008 R2
    • SCCM
  • Active Directory
    • Active Directory Domain Services (AD DS)
    • Group Policies
  • Windows Clients
    • Windows 11
    • Windows 10
    • Windows 8
    • Windows 7
    • Windows XP
    • MS Office
    • Outlook
  • Virtualization
    • VMWare
    • Hyper-V
    • KVM
  • PowerShell
  • Exchange
  • Cloud
    • Azure
    • Microsoft 365
    • Office 365
  • Linux
    • CentOS
    • RHEL
    • Ubuntu
  • Home
  • About

Windows OS Hub

  • Windows Server
    • Windows Server 2022
    • Windows Server 2019
    • Windows Server 2016
    • Windows Server 2012 R2
    • Windows Server 2008 R2
    • SCCM
  • Active Directory
    • Active Directory Domain Services (AD DS)
    • Group Policies
  • Windows Clients
    • Windows 11
    • Windows 10
    • Windows 8
    • Windows 7
    • Windows XP
    • MS Office
    • Outlook
  • Virtualization
    • VMWare
    • Hyper-V
    • KVM
  • PowerShell
  • Exchange
  • Cloud
    • Azure
    • Microsoft 365
    • Office 365
  • Linux
    • CentOS
    • RHEL
    • Ubuntu

 Windows OS Hub / Windows 10 / Windows Couldn’t Connect to the GPSVC Service

October 26, 2020 Group PoliciesWindows 10Windows Server 2016

Windows Couldn’t Connect to the GPSVC Service

User cannot logon to the computer due to the GPSVC (Group Policy Client service) connection error on one of the computers running Windows 10. When trying to log on with a domain user account, the following error appears:

Windows couldn't connect to the gpsvc service.
Please consult your system administrator.

Windows couldn't connect to the gpsvc service

Windows could not connect to the Group Policy Client service.

At the same time, if you try to logon under a local account with local administrator privileges, you will be authenticated, the Desktop will be displayed, but this pop-up message will appear in the Windows 10 notification bar:

Failed to connect to a Windows Service
Windows couldn’t connect to the Group Policy Client service. This problem prevents standard users from signing in.

Failed to connect to a Windows Service Windows couldn’t connect to the Group Policy Client service. This problem prevents standard users from signing in.

The problem appears because the Group Policy Client service (GPSVC) is not running on the computer. If you open the command prompt and try to start gpsvc manually using the net start gpsvc command, the following error will appear:

System error 5 has occurred.
Access is denied.
The problem occurs if the system image or the registry are damaged, if you set the service permissions using GPO or if user has disabled the Group Policy client service on the computer by changing permissions on the service registry key.

To fix the issue, log on under a local administrator account and change the GPSVC registry keys:

  1. Run the Registry Editor (regedit.exe) and make sure that there are entries for gpsvc in the registry. To do it, go to the reg key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services. Make sure that the gpsvc key exists and has %systemroot%\system32\svchost.exe -k netsvcs –p specified for ImagePath.
    If the service registry key is missing, you can import the service registry key from another computer, or check and repair the Windows image using these commands:
    DISM /Online /Cleanup-Image /RestoreHealth
    sfc /scannow
    gpsvc service registry key
  2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost and make sure that there is GPSvsGroup in the list of the parameters;
  3. If the GPSvsGroup parameter is missing, create it manually. Create a REG_MULTI_SZ parameter with the name GPSvcGroup and the value GPSvc; GPSvsGroup under svchost
  4. Then create a new reg key with the name GPSvcGroup under the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost;
  5. In the new GPSvcGroup branch, create two DWORD (32bit) parameters:
    • AuthenticationCapabilities – value 0x00003020 (12320)
    • CoInitializeSecurityParam – value 0x00000001 (1) GPSvcGroup: AuthenticationCapabilities and CoInitializeSecurityParam parameters
  6. Restart your computer.

You can simply import the following REG file to the registry:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
"GPSvcGroup"=hex(7):47,00,50,00,53,00,76,00,63,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\GPSvcGroup]
"AuthenticationCapabilities"=dword:00003020
"CoInitializeSecurityParam"=dword:00000001

You can check the gpsvc permissions and compare them with those on a computer working normally. You can display current service permissions with this command:

sc sdshow gpsvc

After restarting the computer, the gpsvc connection error will disappear and a user will be successfully logon to Windows 10.

0 comment
3
Facebook Twitter Google + Pinterest
previous post
Configuring High Performance NGINX and PHP-FPM Web Server
next post
Reset Local Group Policy Settings in Windows

Related Reading

Configuring Event Viewer Log Size on Windows

May 24, 2023

How to Detect Who Changed the File/Folder NTFS...

May 24, 2023

Enable Single Sign-On (SSO) Authentication on RDS Windows...

May 23, 2023

Allow Non-admin Users RDP Access to Windows Server

May 22, 2023

How to Create, Change, and Remove Local Users...

May 17, 2023

Leave a Comment Cancel Reply

Categories

  • Active Directory
  • Group Policies
  • Exchange Server
  • Microsoft 365
  • Azure
  • Windows 11
  • Windows 10
  • Windows Server 2022
  • Windows Server 2019
  • Windows Server 2016
  • PowerShell
  • VMWare
  • Hyper-V
  • Linux
  • MS Office

Recent Posts

  • Configuring Event Viewer Log Size on Windows

    May 24, 2023
  • How to Detect Who Changed the File/Folder NTFS Permissions on Windows?

    May 24, 2023
  • Enable Single Sign-On (SSO) Authentication on RDS Windows Server

    May 23, 2023
  • Allow Non-admin Users RDP Access to Windows Server

    May 22, 2023
  • How to Create, Change, and Remove Local Users or Groups with PowerShell?

    May 17, 2023
  • Fix: BSOD Error 0x0000007B (INACCESSABLE_BOOT_DEVICE) on Windows

    May 16, 2023
  • View Success and Failed Local Logon Attempts on Windows

    May 2, 2023
  • Fix: “Something Went Wrong” Error When Installing Teams

    May 2, 2023
  • Querying Windows Event Logs with PowerShell

    May 2, 2023
  • Configure Windows LAPS (Local Administrator Passwords Solution) in AD

    April 25, 2023

Follow us

  • Facebook
  • Twitter
  • RSS
Popular Posts
  • How to Hide or Show User Accounts from Login Screen on Windows 10/11?
  • Reset Local Group Policy Settings in Windows
  • Configuring Proxy Settings on Windows Using Group Policy Preferences
  • How to Refresh AD Groups Membership without Reboot/Logoff?
  • How to Disable NetBIOS and LLMNR Protocols in Windows Using GPO?
  • Changing Desktop Background Wallpaper in Windows through GPO
  • Windows: Block Remote Network Access for Local User Accounts
Footer Logo

@2014 - 2023 - Windows OS Hub. All about operating systems for sysadmins


Back To Top