Tech News Today
  • Hardware
    • Motherboards
    • CPUs
    • Graphic Cards
    • RAM
    • SSDs
    • Computer Cases
    • Monitors
    • Peripherals
    • Power Supply Unit
    • PC Builds
    • Computer Tips
  • Software
  • Operating System
    • Windows
    • Mac
    • Linux
  • Gaming
  • Mobile
  • Console
  • More
    • Internet
    • Networking
    • Security
    • Buyer’s Guide
    • Gadgets
    • Laptops
    • Reviews
    • How To
    • News
Facebook Twitter Instagram
Tech News Today
  • Hardware
    • Motherboards
    • CPUs
    • Graphic Cards
    • RAM
    • SSDs
    • Computer Cases
    • Monitors
    • Peripherals
    • Power Supply Unit
    • PC Builds
    • Computer Tips
  • Software
  • Operating System
    • Windows
    • Mac
    • Linux
  • Gaming
  • Mobile
  • Console
  • More
    • Internet
    • Networking
    • Security
    • Buyer’s Guide
    • Gadgets
    • Laptops
    • Reviews
    • How To
    • News
Tech News Today
Home»Windows»Fix: The Sign-in Method You’re Trying to Use Isn’t Allowed

Fix: The Sign-in Method You’re Trying to Use Isn’t Allowed

Abhishek SilwalBy Abhishek SilwalDecember 18, 2022
the sign in method is not allowed

System administrators on a computer with multiple users or a network with multiple clients can restrict a user from accessing the domain. In such cases, the user will get the error message “The sign-in method you’re trying to use isn’t allowed.”

It is not supposed to be a system issue but a security and privacy feature. However, it is also possible that the admin unintentionally imposed such a restriction. Apart from that, some security software may also block the communication between a client and a domain controller in very rare cases.

Table of Contents

  • How to Fix “The Sign-in Method You’re Trying to Use Isn’t Allowed”?
    • Remove User from “Deny Log on Locally” Policy
    • Add User to “Allow Log on Locally” Policy
    • Allow Network Access
    • Reconfigure Security Applications

How to Fix “The Sign-in Method You’re Trying to Use Isn’t Allowed”?

If you have access to the domain controller or an admin account, you can use it to remove the restriction. Otherwise, you need to contact the admin and have them perform the necessary solutions.

If you can’t log in to any accounts on your non-domain-joined computer, you need to perform a System Restore from Advanced Startup to revert your system back to the state when the issue hadn’t occurred yet.

Remove User from “Deny Log on Locally” Policy

The main policy that admins use to restrict user access is the “Deny log on locally”. By default, this policy only restricts Guest users. However, it is possible to add any other users or groups, except the Administrators group, to the policy.

Depending on whether the issue occurs for a local or domain-joined computer, follow the steps below:

For Local User

  1. Open Run by pressing Win + R.
  2. Type gpedit.msc and press Enter to open the Local Group Policy Editor.
  3. Go to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Right Assignment.
  4. Search for and check the setting of Deny log on locally.
    deny-log-on-locally
  5. If the setting shows Users, or any user or group that you don’t want to have their access restricted,
    • Double-click on Deny log on locally.
    • Select the user or group you wish to provide access to and click Remove.
      deny-log-on-locally-remove
    • Hit Apply and OK.

For Domain User

  1. Open Run.
  2. Type gpmc.msc and press Enter to open the Group Policy Management Console.
  3. Expand “Domain name” > Domains > “Domain name” > Group Policy Objects.
  4. Right-click on the relevant GPO and select Edit.
    group-policy-management-gpo-edit
  5. Go to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Right Assignment.
  6. Check if Deny log on locally includes Users, or any user or group that do not need such restriction.
  7. If so, double-click on Deny log on locally, select the user or group and click Remove.
  8. Hit Apply and OK.
  9. Open Run again.
  10. Type cmd and press Ctrl + Shift + Enter to open the Elevated Command Prompt.
  11. Type the command gpupdate /force and press Enter to apply the change to the GPO across all users.
    gpupdate-force

Add User to “Allow Log on Locally” Policy

You can also try adding the user to the “Allow log on locally” to bypass any restrictions denying access.

For Local User

  1. Open the Local Group Policy Editor.
  2. Go to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Right Assignment.
  3. Double-click on Allow log on locally.
    allow-log-on-locally
  4. Click on Add User or Group > Advanced.
  5. Select Object Types, tick all options, and click OK.
  6. Then, hit Find Now.
  7. Select the required user or group from the list and click OK > OK > OK.|
    select-users-or-groups-ok

For Domain User

  1. Open the Group Policy Management Console.
  2. Expand “Domain name” > Domains > “Domain name” > Group Policy Objects.
  3. Double-click on Default Domain Controller Policy.
    group-policy-objects
  4. Go to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Right Assignment.
  5. Double-click on Allow log on locally.
  6. Click on Add User or Group > Advanced.
    add-users-and-group
  7. Select Object Types. Then, tick all options and click OK.
  8. Click on Find Now and select the required user or group from the list.
  9. Click OK three times in a row to change the policy while closing the windows.
  10. Open Run again.
  11. Type cmd and press Ctrl + Shift + Enter to open the Elevated Command Prompt.
  12. Enter the command gpupdate /force to apply the change to the GPO across all users.

Allow Network Access

Some network systems also use Network Policy Server (NPS) as it provides more customized security options, including those to restrict access. So, the Active Directory settings related to accessing a remote device use the NPS policies by default.

If you don’t use Network Policy Server or want to bypass the permission setting imposed by that component, you can allow network access to the relevant Users from the Active Directory Users and Computers snap-in.

  1. Open Run.
  2. Type dsa.msc and press Enter to open Active Directory Users and Computers.
  3. Expand the domain name and select Users.
  4. Double-click on the user experiencing the issue to open their Properties.
  5. Go to the Dial-in tab.
  6. Check Allow access and click OK.
    allow-access-network-access-permission

However, we still recommend actually using the Network Policy Server. So, you need to make the necessary changes to its policy settings instead. To do so,

  1. Open Run.
  2. Type nps.msc to open Network Policy Server.
  3. Expand Policies > Network Policies and double-click on the relevant policy to open its Properties. If you don’t know which policy you need to check, click on each one and check the Conditions and the Settings.
    network-policies-deny-access
  4. Then, make the necessary changes to allow the user or remove the user from the Deny Access policy by navigating through the options.

Reconfigure Security Applications

Some third-party firewalls or other security software may also be responsible for blocking a user from accessing the domain. So, if the above methods don’t work, you need to check your firewall and reconfigure it to allow access. You can also disable Firewall, but we don’t recommend doing so as it is a security feature for your protection.

fix
Abhishek Silwal
  • LinkedIn

Abhishek Silwal is an Electronics Engineer and a technical writer at TechNewsToday. He specializes in troubleshooting a wide range of computer-related issues. His educational background in Electronics Engineering has given him a solid foundation in understanding of computers. He is also proficient in several programming languages and has worked on various robotics projects. Even in his early days, he used to tinker with various computer components, both hardware, and software, to satiate his curiosity. This experience has given him a breadth of experience that goes beyond his educational qualification. Abhishek has been writing articles on dealing with varieties of technical issues and performing specific tasks, especially on a Windows machine. He strives to create comprehensive guides on fixing many system and hardware issues and help others solve their problems. You can contact him at abhisheksilwal@technewtoday.com

Related Posts

how to delete win backup files

How to Delete Backup Files on Windows

January 29, 2023
how to reset password on hp laptop

How to Reset Password on HP Laptop

January 29, 2023
Reset BIOS password

4 Ways to Reset BIOS Password

January 28, 2023
how to make windows 11 look like windows 10

How to Make Windows 11 Look Like Windows 10

January 25, 2023
how to find hidden folder in laptop

How to Find Hidden Folder in Laptop

January 24, 2023
mouse not showing in chrome

Mouse Not Showing in Chrome? Here’s How to Fix It

January 25, 2023
Add A Comment

Leave A Reply Cancel Reply

Latest Posts
how long does a cmos battery last

How Long Does a CMOS Battery Last

January 25, 2023
thunderbolt vs usb c

Thunderbolt Vs USB C: What’s the Difference

January 25, 2023
how to find hidden folder in laptop

How to Find Hidden Folder in Laptop

January 24, 2023
You may also like
how-to-connect-headphones-to-tv

5 Ways to Connect Headphones to TV

January 29, 2023
connect-airpods-to-samsung-tv

How to Connect AirPods to Samsung TV? (Step-by-Step Guide)

January 29, 2023
AIO Pump Not Working

AIO Pump Not Working? Here’s How to Fix It

January 29, 2023
Recommended
Cookie Clicker Garden Guide

Cookie Clicker Garden Guide to Unlocking Every Seed

September 26, 2021
monitor no signal

Computer Turns On But Monitor Says No Signal (9 Ways To Fix)

November 10, 2022
Facebook Twitter Pinterest
  • Home
  • About Us
  • Our Team
  • Editorial Guidelines
  • Privacy Policy
  • Affiliate Disclosure
© 2023 TechNewsToday.

Type above and press Enter to search. Press Esc to cancel.