IT Error Decoder
Windows Admin

How to Fix Group Policy Client service failed the sign-in

Error message

The Group Policy Client service failed the sign-in. Access is denied.

If you're seeing "Group Policy Client service failed the sign-in", you're not alone. Here's what it means, why it happens, and the steps to resolve it.

What this error means

Windows couldn't apply user-level Group Policy at sign-in, so the logon was aborted.

Why this happens

Corrupted user profile, ACL damage on `%ProgramData%\Microsoft\Group Policy\History`, missing GPC service, or a broken connection to a domain controller.

Step-by-step fix

  1. Sign in with a different account (or local admin) to access the machine.

  2. Confirm the Group Policy Client service exists and is set to Automatic.

    command
    Get-Service gpsvc | Format-List *

  3. Reset ACLs on the Group Policy history folder.

    command
    icacls "%ProgramData%\Microsoft\Group Policy\History" /reset /T /C

  4. Force a Group Policy refresh and reboot.

    command
    gpupdate /force

Affected products

Windows Admin

Still broken? Try these

  • If only one user is affected, recreate that user's profile.
  • Check Event Viewer → Applications and Services Logs → Microsoft → Windows → GroupPolicy.
  • Verify the machine can reach a DC: `nltest /dsgetdc:<domain>`.

Related errors

Frequently asked questions

What does "Group Policy Client service failed the sign-in" mean?

Windows couldn't apply user-level Group Policy at sign-in, so the logon was aborted.

What causes "Group Policy Client service failed the sign-in"?

Corrupted user profile, ACL damage on `%ProgramData%\Microsoft\Group Policy\History`, missing GPC service, or a broken connection to a domain controller.

How do I fix "Group Policy Client service failed the sign-in"?

1. Sign in with a different account (or local admin) to access the machine. 2. Confirm the Group Policy Client service exists and is set to Automatic. 3. Reset ACLs on the Group Policy history folder. 4. Force a Group Policy refresh and reboot. Always test changes in a non-production environment first.

Browse more errors in Windows Admin: Fix Windows administration errors. Access denied, RPC server unavailable, trust relationship failures, Group Policy errors, and network path issues. Or paste your own error into the error decoder tool to find a match. You can also go back to the homepage to browse common errors by topic.