I have 2 computers (64-bit Win 7 Ent.) out of about 30 that are not able to apply group policy at start up. They can get and apply group policy correctly when I run the "gpupdate" command. Every time one of these 2 computers start there are a block of 9 group policy application event log errors with and Event ID 8194 all saying "The client-side extension could not apply ... because it failed with error code '0x80070041 Network access is denied.'"
I have tracked the cause down to the configuration change for Hardened UNC Paths which I applied using this<https://support.microsoft.com/en-us/kb/3000483>. The specific shares I am using are \\*\SYSVOL and \\*\NETLOGON. Everything works right away if I disable (or just change the paths listed) so it no longer applies and then breaks again as soon as I reapply the setting. I was able to run a command prompt at start up and I get an error if I quickly try to go to \\DomainName\SYSVOL or \\DomainName\NETLOGON. After about a minute or two trying the same UNC paths works so I believe the problem is related to these computers having trouble converting the DomainName into DomainControllerName before it tried to use Kerberos authentication on the UNC path. Does anyone have any tips/suggestions on how I can try to fix this problem? - Stephen
