FIX: The Sign-in method you're trying to use isn't allowed (Solved)

The error "The Sign-in method you're trying to use isn't allowed. For more info, contact your network administrator", commonly appears when you try to log on using the "Guest" account to a Windows 10 PC, or to a Domain Controller with any other user than then Domain Administrator. The error appears, because by default you cannot sign in locally with any user that hasn't administrator permissions on a Domain Controller or to a Windows 10 PC .

This tutorial contains instructions to bypass the error "The Sign-in method you're trying to use isn't allowed" on Windows 10 or Server 2016/2012.

How to FIX: Sign-In Method is not Allowed on Windows 10 & Server 2016/2012.

To solve the error "The Sign-in method you're trying to use isn't allowed", follow the instructions below, according your case. you have the following options:

• Case 1. Allow User to Log on locally on Windows 10 or to a Standalone Server.

• Case 2. Allow Domain User to Log on locally on a Domain Controller.

Case 1. How to Allow a User to Log on locally on a Standalone Server.

If you want to sign in locally, with any other user than Administrator, to a Standalone Server 2016/2012/2008, or on a computer which part of a Domain, proceed and modify the default Group Policy to allow the Sign-in to standard users, by following the instructions below:

1. Login to the Server (or the domain computer), as Administrator.
2. Open the Local Group Policy Editor. To do that:

1. Simultaneously press the Windows + R keys to open run command box.
2. Type gpedit.msc and press Enter.

2. In Group Policy Editor navigate to: Computer Configuration > Windows Settings> Security Settings > Local Policies > User Rights Assignment

3. At the right Pane: double click at Allow log on locally

3. At 'Allow log on locally Properties' window, click Add User or Group. *

* Note: By default on a standalone server the following groups has permission to log on locally:

• Administrators
• Backup Operators
• Users

So, if you want to give the permission only to specific user(s) to logon locally, remove the "Users" group from here.

4. Type the name of the user that you want to log on locally and click OK twice to close all windows.

5. Then open the Deny log on locally policy and make sure is empty.

6. Close the Local Group Policy Editor.
7. Restart the server, or run the gpupdate /force command to apply the new group policy settings (without restart).

Case 2. How to Allow a Domain User to Log on locally on a Domain Controller (Server 2016).

In order a domain user to logon locally from the domain controller console, the user must belong to one of the following groups:

• Account Operators
• Administrators
• Backup Operators
• Print Operators
• Server Operators

So, if you want to grant a user account the ability to log on locally to a domain controller, you must make that user a member of one of the above groups. *

* Note: To avoid security risks, do not add the user to Administrators group. and prefer to add the user to 'Backup Operators'.

That's it! Let me know if this guide has helped you by leaving your comment about your experience. Please like and share this guide to help others.

If this article was useful for you, please consider supporting us by making a donation. Even $1 can a make a huge difference for us in our effort to continue to help others while keeping this site free:

• Author
• Recent Posts

Konstantinos Tsoukalas

Konstantinos is the founder and administrator of Wintips.org. Since 1995 he works and provides IT support as a computer and network expert to individuals and large companies. He is specialized in solving problems related to Windows or other Microsoft products (Windows Server, Office, Microsoft 365, etc.).

Latest posts by Konstantinos Tsoukalas (see all)

• How to Disable Device Encryption in Windows 11. - April 17, 2024
• How to View Permissions on Shared Folders on Windows 10/11. - April 15, 2024
• FIX 0x80070643 error in KB5034441 update (Solved) - April 10, 2024