“Account Restrictions are Preventing this User from Signing in”. Repair

The error message “Account restrictions are preventing this user from signing in” typically occurs when the user fails to set up a Remote Desktop Connection. Users commonly encounter this issue on Windows Server 2012 or higher versions. The problem often arises from a specific Windows Group Policy setup that restricts the transfer of login credentials to the remote workstation. However, some users have reported that the problem may be caused by expired or blank passwords. While this could be the case, there may be other sources contributing to the problem.

“I just tried on Server 2019, and it gave me an “Account Restrictions are preventing this user from signing in…” error. However, RDP’ing with the plaintext password worked. Changing the hash to an invalid value yields an authentication error,” writes Twitter follower @DukezDad. [source]

Security administrators and other groups have increasingly been utilizing Remote Desktop Connections. However, like any program, errors can occur, including with Remote Desktop Connections. Fortunately, there are steps you can take to quickly and easily resolve these issues, as outlined below.

What is the reason for the “Account Restrictions are Preventing this User from Signing in” Error Alert?

This error notification can be the result of various scenarios, nevertheless, the following events might be the cause most frequently —

Now that you have a clear understanding of the potential reasons for the error notification, you can fix your trouble by means of the remedies set forth below.

Method 1: Deactivating Windows Group Policy

As already stated before, there is a special security policy that does not let the Remote Desktop Client convey the supplied credentials. This policy, nevertheless, might result in the said error alert in certain scenarios. Hence, to eliminate the error alert and be capable of setting a connection, you will have to deactivate it. This is how to make it possible:

1. Use the Windows Key + R hotkey to start the Run dialog box.
2. Specify “gpedit.msc” in the search field and then press Enter.
3. As soon as the Windows Local Group Policy Editor comes up, proceed to the below-said directory:
   

   Computer Configuration > Administrative Templates > System > Credentials Delegation

4. At this point, in the right-hand section, find the “Restrict delegation of credentials to the remote servers” policy.
5. Double-click it to amend it. Define it to Disabled, select Apply and then choose OK.
   
   

   Deactivating the Security Policy

6. Inspect whether it resolves the problem.

Also consider reading: Hacked Facebook account. How do I Fix?.

Method 2: Defining a Password

The error notification can also come up when the user account that you are applying isn’t secured by any password at all. Hence, in order to resolve the trouble, you will need to establish a password and then inspect whether it resolves the problem. Otherwise, you will need to provide a password every time you would like to sign-in. Nevertheless, if you would like to, you can bypass this long process by just deactivating a Windows Group Policy. This is how to make it possible:

1. Start the Local Group Policy Editor as displayed above.
2. Proceed to the below-given location:
   

   Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options

3. In the right-hand section, you have to find the “Accounts: Limit local account use of blank passwords to console logon only” policy.
4. Double-click to amend it and then simply define it to Disabled.
   
   

   Disabled Local Group Policy

5. Choose Apply and then OK.

Robert Bailey

IT Security Expert

It is better to prevent, than repair and repent!

When we talk about the intrusion of unfamiliar programs into your computer's work, the proverb "Forewarned is forearmed" describes the situation as accurately as possible. Gridinsoft Anti-Malware is exactly the tool that is always useful to have in your armory: fast, efficient, up-to-date. It is appropriate to use it as an emergency help at the slightest suspicion of infection.

DOWNLOAD NOW

Gridinsoft Anti-Malware 6-day trial available.
EULA | Privacy Policy | 10% Off Coupon

1. Group Policy: https://en.wikipedia.org/wiki/Group_Policy

Article

"Account Restrictions are Preventing this User from Signing in". Repair

Description

The error notification “Account restrictions are preventing this user from signing in” normally comes up in times when a customer is not capable of setting a Remote Desktop Connection to a target system by applying the Windows Server 2012 or higher versions.

Author

Robert Bailey (robert)

Copyright

HowToFix.Guide

 

German Japanese