Post

FSLogix - Service group policy client prevents login

Assign users

If you ever encounter the following error with FSLogix that a user can’t login because of the error Service group policy client prevents login.

Here is how to fix it!

Find the SID for the affected user ‘Local user’

1
Get-LocalUser -Name 'johndoe' | Select-Object  sid

Find the SID for the affected user ‘Active Directory’

1
2
Import-Module ActiveDirectory
Get-AdUser -Identity toms | Select Name, SID, UserPrincipalName

Open Regedit and navigate to the following regkey:

1
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileService\References\<sid affected user>

Change the “RefCount” value to 0.

This post is licensed under CC BY 4.0 by the author.