How to fix Admin error restricting Windows login
If you encounter the message An administrator has restricted sign-in, it is not necessarily an account error. It may be that you are only allowed to log in in safe mode. Here are some methods to handle Windows login restrictions.
Check if computer is locked remotely
Step 1:
On another device, open your browser and visit the link below.
- Microsoft Access Device Management
Continue signing in with the same Microsoft account associated with the locked computer.
Step 2:
In the interface, click on the Device item to adjust. Click on the locked device and click Find my device .
Check the status to confirm if it is locked. If you see a Locked message, unlock it with a PIN, password, or biometrics. If the lock is not removed and you are still blocked, click Windows Recovery Environment, select Troubleshoot, and then use Reset this PC.
Remove account restrictions via Group Policy
Step 1:
You open the Run dialog box and type gpedit.msc . Then open the new interface, you access Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment .
Step 2:
In the right interface, click Deny log on locally.
Select the blocked account and click Remove .
Step 3:
Repeat this for Deny log on through Remote Desktop Services and Deny access to this computer from the network .
Step 4:
You also need to confirm that the account has the appropriate permissions Allow log on locally or Allow log on through Remote Desktop Services and that the account belongs to the correct Administrators or Remote Desktop Users group.
Type CMD in the search bar then type gpupdate /force and press Enter.