"The Group Policy Client service failed the logon. Access is denied"

So you’ve created a new user, and when you login for the first time, to any Citrix server, you get this:

<figcaption class="wp-caption-text">? plz respond</figcaption></figure>

Here is what I found

Their Citrix profile gets assigned incorrect permissions. To be exact, a SID exactly ONE below their proper one. That SID doesn’t actually exist either (uwotm8).

So go to where you’ve configured your Citrix UPM profiles, right-click you questionable profile > properties > security and….

<figcaption class="wp-caption-text">the dodgy SID</figcaption></figure>

So that SID above, is exactly ONE below the correct one. The correct one for that user is “…140375”. That “…140374” SID doesn’t exist.

Remove the SID, propagate permissions, and remove the NTUSER.DAT and you’re good to go.