When configuring a user's work environment, a domain owner has to deal with a tool such as group policy. In simple terms, it is a set of settings for the Windows operating environment, from setting desktop wallpaper to a ban on downloading and running software. Access and management of group policy is carried out by the domain administrator and members of his group.
Group policies are very popular in large enterprises whose employees use a certain area of the information network within a single network node. They can reduce the cost of Internet resources and maintenance of network computers, increase productivity, user convenience and security, configure most of the parameters of the Windows environment at the same time.
Sometimes, due to a registry error, when you turn on the computer, Windows starts to be blocked and a system message appears that the "Group Policy Client" prevents you from entering the system. There is a need to turn it off.
Entering Safe Mode
All manipulations with the Group Policy Client service are performed in a safe mode. To enter safe mode you will need:
- turn on the computer;
- Before loading the system, press the F8 key on the keyboard;
- select the line “Safe Mode” in the menu that opens;
- go to it by pressing the "Enter" key.
Checking the Status of the Group Policy Client Service
When the “Group Policy Client” does not start, it is advisable to check the status of the “Group Policy Client (gpsvc)” service, which is responsible for its parameters defined by administrators for local computers running Windows 7. You can find out if the “gpsvc” service is working or not, task manager. This can be done as follows:
- right click on the system tray;
- in the functional menu, select the line “Run task manager”;
- Switch to the Services tab
- find the gpsvc service;
- View its status (running or stopped).
You can use another way:
- go to the main menu using the "Start" button;
- enter the query “Services” at the bottom of the search bar;
- Run the Services snap-in
- find the gpsvc service;
- check his condition.
It will not be possible to stop the gpsvc service through the task manager or the Services snap-in, since it is launched on behalf of the local network and no changes can be made to its launch parameters.
PsExec Utility
Temporarily stop the gpsvc service, which is responsible for the Group Policy Client service settings, using the PsExec utility, which allows you to execute commands on a remote computer. It does not require installation, just copy the boot file to the system folder “System 32” and run it through the command line. To disable the gpsvc service, you must:
- using the “PsExec” utility, run the command line from the administrator account;
- enter the command of the following form “net stop gpsvc”;
- service will be stopped.
Do not forget that this is a temporary measure. When the system reboots, the gpsvc service starts again. To completely disable it, you will need to change the startup parameters, which will require mandatory editing of the registry.
Export or back up a registry branch
Before changing any registry settings, it is necessary to export the section or subsection to which changes will be made. Creating a backup will require the following steps:
- Log in as an administrator
- Use the Win + R keys to call the Run dialog box;
- enter the command “regedit” in the line;
- press the Enter key;
- Using Explorer, find and select the desired registry subkey;
- call the functional menu by right-clicking on a subsection;
- use the “Export” function;
- in a new window indicate the location for storing the file and its name;
- it is important to pay attention to the file extension, it should be “.reg”;
- click on the “Save” button.
If the registry branch responsible for the settings of the Group Policy Client service is damaged, to restore it, you just need to run the backup file.
Group Policy Client service and its disconnection through the registry
After completing the export and creating a backup copy of the required registry branch, you can proceed directly to changing its parameters. This will require sequential execution of the following algorithm of actions:
- start the Windows registry using the "regedit" command, specifying it in the "Run" dialog box;
- find the subsection “gpsvc” responsible for the settings of the “Group Policy Client” service using the following path - HKLM \ SYSTEM \ CurrentControlSet \ Services \;
- Before proceeding with editing, you should be entitled to do so;
- in Explorer, right-click on the "gpsvc" subsection;
- find and select the item “Permissions” in the functional menu;
- click on the line "Advanced";
- in a new window switch to the "Owner" tab;
- choose your account;
- confirm the changes by clicking on the “OK” button;
- in the "Security" block, check the box in the checkbox opposite the "Full access" item;
- confirm your actions with one more click on the “OK” button;
- Go to the service settings
- click on the “Start” parameter;
- replace the value “2” with “4”.
- save changes made;
- to restart a computer.
Removing a message about unavailability of Windows services in the system tray
After the Group Policy Client service was turned off, a warning about the unavailability of Windows services will constantly appear in the system tray. You can avoid this by deleting the registry key "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Winlogon \ Notifications \ Components \ GPClient" as follows:
- start the Windows registry editor;
- find the right branch;
- change the owner and rights to it;
- through the "Export" function create its backup file;
- delete the registry branch.
After carrying out such manipulations, the system message will no longer be displayed in the taskbar.
Rollback system
In some cases, when the login is blocked and a message appears that the Group Policy Client is preventing it from starting, Windows will roll back to its operating parameters using the recovery point. This measure is available for later versions of Windows. To roll back the system you will need:
- press the start button;
- go to the line "All programs";
- go to the "Standard" catalog;
- open the Utilities folder;
- run the System Restore component;
- A new window for recovering system settings will open
- if the recommended recovery point does not fit, click on the line “Choose another recovery point”;
- to continue the recovery, click the "Next" button;
- in the window that appears, check the box “Display recovery points older than 5 days”;
- select the desired point and click on the “Next” button;
- by clicking on the “Finish” button, start the recovery process;
- wait for the end of the process.
Disabling Group Policy actions is possible in several ways, but the most effective of them will be to change the value of some parameters of the registry branch. The main thing is not to forget to create a backup file of the necessary subsection, so that in case of failed manipulations return to the original settings.