Fix: Account Restrictions are Preventing this User from Signing in
The most frequent cause is a policy within the Local Group Policy or Active Directory, often related to password complexity requirements or time-of-day restrictions. Additional factors like account lockouts or restrictive group policies may also contribute to this issue, necessitating a review of security settings and policy configurations.
Now that you are aware of the potential causes of the error message, you can isolate your issue by using the solutions provided below.
Solution 1: Disable Windows Group Policy
As we mentioned earlier, a security policy can prevent the RD client from exposing supplied credentials. This policy can cause the error message in some scenarios. Therefore, to get rid of the error message and establish a connection, you will need to disable it.
- Press Windows Key + R to open the Run dialog box.
- Type in ‘gpedit.msc’ in the search box and press Enter.
- Once the Local Group Policy Editor opens, navigate to the following directory:
Computer Configuration > Administrative Templates > System > Credentials Delegation
- On the right-hand side, locate the ‘Restrict delegation of credentials to remote servers’ policy.
- Double-click it to edit it. Set it to Disabled, click Apply and then OK.
Disabling the Security Policy - Check if the issue is resolved.
Solution 2: Set up a Password
The error message can also appear if the user account does not have a password set. To fix the issue, set up a password and then check if it resolves the problem. If it does, you will need to enter a password every time you sign in. However, you can avoid this by disabling a specific Windows Group Policy.
- Open the Local Group Policy Editor as shown above.
- Go to the following location:
Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options
- On the right-hand side, locate the ‘Accounts: Limit local account use of blank passwords to console logon only’ policy.
- Double-click to edit it and set it to Disabled.
Disabling the Policy - Click Apply and then OK.
