The "Group Policy Client" prevents logging on. How can I turn it off?

The owner of the domain when setting up the parameters of the user's working environment has to deal with a tool such as Group Policy. In simple terms, it is a set of settings for the Windows operating environment, from installing desktop wallpaper to preventing the download and launch of software. Access and management of Group Policy is carried out by the domain administrator and members of his group.

Group politicians are very popular in large enterprises, whose employees use a certain area of the information network within the same network node. They allow you to reduce the cost of Internet resources and maintenance of network computers, increase productivity, user convenience and security, and configure most of the settings of the Windows desktop at the same time.

Sometimes, due to a registry error, when you turn on your computer, the Windows startup is blocked and a system message appears that the Group Policy Client prevents logging on. There is a need to disconnect it.

Entering safe mode

All manipulations with the "Group Policy client" service are performed in a safe mode. To enter safe mode, you will need:

• turn on the computer;
• Before the system is booted, press the "F8" key on the keyboard;
• In the opened menu choose the line "Safe mode";
• Press the "Enter" key to go to it.

Checking the status of the Group Policy Client service

When the Group Policy Client does not start, it is advisable to check the status of the Group Policy Client (gpsvc) service, which is responsible for its settings defined by administrators for local computers running Windows 7. You can find out if the "gpsvc" service is working or not The task manager. You can do this as follows:

• Right-click on the system tray;
• In the function menu, select the line "Start Task Manager";
• Switch to the "Services" tab;
• Find the service "gpsvc";
• See its status (running or stopped).

You can use another way:

• Go to the main menu, using the "Start" button;
• At the bottom of the search box enter the query "Services";
• Run the "Services" snap-in;
• Find the service "gpsvc";
• Check its status.

You can not stop the service "gpsvc" through Task Manager or the "Services" snap-in because it starts on behalf of the local network and you can not make any changes to its startup parameters.

PsExec utility

Temporarily stop the "gpsvc" service responsible for the parameters of the "Group Policy client" service, the "PsExec" utility will help to execute commands on the remote computer. It does not require installation, it is enough to copy the program's boot file to the system folder "System 32" and run it through the command line. To disable the gpsvc service, you must:

• Using the utility "PsExec", run the command line from the administrator account;
• Enter the following command: "net stop gpsvc";
• The service will be stopped.

Do not forget that this is a temporary measure. When the system is restarted, the "gpsvc" service will start up again. To completely disable it, you will need to change the startup parameters, which will require you to edit the registry.

Export a registry branch or create a backup

Before changing any registry settings, you need to export that section or subkey, which will be changed. Creating a backup requires the following steps:

• Log in as an administrator;
• With the "Win + R" keys, open the "Run" dialog box;
• In the line enter the command "regedit";
• Press the "Enter" key;
• Using the explorer, find and select the required registry subkey;
• Call the function menu by right-clicking on the subkey;
• Use the function "Export";
• In a new window specify the location for the file and its name;
• It is important to pay attention to the file extension, it must be ".reg";
• Click the "Save" button.

If the registry branch that is responsible for configuring the Group Policy Client service corrupts, you simply need to run a backup file to restore it.

Group Policy Client service and its disconnection through the registry

After performing the export and backing up the required registry branch, you can proceed directly to changing its settings. This will require the sequential execution of the following algorithm of actions:

• Run the Windows registry by using the "regedit" command, specifying it in the "Run" dialog box;
• Find the subsection "gpsvc" responsible for the settings of the "Group Policy client" service, on the following path - HKLM \ SYSTEM \ CurrentControlSet \ Services \;
• Before proceeding with editing, you should obtain the right to do so;
• In the Explorer, right-click on the subkey "gpsvc";
• In the functional menu, find and select the "Permissions" item;
• Click on the "Advanced" line;
• In a new window switch to the "Owner" tab;
• Select your account;
• Confirm the changes by clicking on the "OK" button;
• In the "Security" section, check the checkbox in front of the "Full access" puncture;
• Confirm your actions with one more click on the button "Ok";
• Go to the service settings;
• Click on the "Start" option;
• Replace the value "2" with "4".
• Save the changes;
• to restart a computer.

Deleting a message about the unavailability of Windows services in the system tray

After the "Group Policy client" service was disabled, the Windows system will not be alerted in the system tray. You can avoid this by deleting the registry branch "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Winlogon \ Notifications \ Components \ GPClient" as follows:

• Run the Windows Registry Editor;
• Find the desired branch;
• Change the owner and the rights to it;
• Through the function "Export" create its backup file;
• Remove the registry branch.

After carrying out such manipulations, the system message will no longer be displayed in the taskbar.

System rollback

In some cases, when you block the logon and the message that the Group Policy Client prevents it from starting, Windows will roll back to its operating parameters using the restore point. This measure is available for later versions of Windows. To perform a system rollback, you will need:

• Click the "Start" button;
• Go to the line "All Programs";
• Go to the "Standard" catalog;
• Open the "Service" folder;
• Run System Restore;
• A new window of the System Restore Wizard opens;
• If the recommended restore point is not suitable, click on the line "Select another recovery point";
• To continue recovery, click the "Next" button;
• In the appeared window, select the item "Display recovery points older than 5 days";
• Select the desired point and click the "Next" button;
• Click on the "Finish" button to start the restore process;
• Wait until the end of the process.

You can disable Group Policy actions in several ways, but the most effective one is changing the value of some registry key settings. The main thing is not to forget to create a backup file of the desired subsection, in order to return to the initial settings in case of failed manipulations.