To resolve this problem, make sure that the Thread account name or the referenced account is added to the IIS_IUSR group and assigned full permissions. Restart the Apex One and Apex Central services, and then see if the Policy Status changes from "Pending: Managed server deploying".
The error and Thread account to be added can be found in Application Event Viewer log. Below is an example:
Collapse section (Log Sample) Event code: 3008 Event message: A configuration error has occurred. Event time: 3-10-2019 16:18:26 Event time (UTC): 3-10-2019 14:18:26 Event ID: 64bfe5717d2f4cb89ebb6f5d0fbc15ff Event sequence: 1 Event occurrence: 1 Event detail code: 0 Application information: … Process information: … Exception information: … Could not load file or assembly 'libLogClient4Net' or one of its dependencies. Access is denied. Request information: Request URL: … Request path: … User host address: … User: Is authenticated: False Authentication Type: Thread account name: APEXONESVR\sa-apexone