I had a user complaint over not being able to access a terminal server. He would attempt access and receive an error message:
The Group Policy Client service failed the logon. Access denied.
Since it was a terminal server; I renamed his profile and he was able to access it.