The mentioned error message can occur when attempting one of the two sign-in scenarios:

You’re trying to log in with a Guest account on a Windows 11 or Windows 10 PC. You’re trying to log in on a Windows Server with an account that is not a domain administrator.

The error message that you may come across is: In this article, we show you how to bypass this error message simply by making changes to certain Group Policies.

Why the Error Occurs

“The sign-in method you’re trying to use isn’t allowed” error occurs when a sysadmin has restricted a specific user or an entire user group from accessing a computer. This policy can be applied on individual computers, as well as the computer that has been joined to a domain.

Why the Error Occurs Fix the Disallowed Sign-In Method Error Allow User to Log On Locally Allow User to Log On Locally on Windows 10, 11 Allow User to Log On Locally on Windows Server Remove User from the Deny Logon List Remove User from Deny Log on Locally on Windows 10, 11 Remove User from Deny Log on Locally on Windows Server Disable Antivirus Software Closing Thoughts

Two policies control sign-in behavior:

Allow log on locally Deny log on locally

In both of these Group Policies, the user or group is defined that should be allowed to log on, or restricted. Note that the “Deny log on locally” policy has precedence over the “Allow log on locally” policy. Therefore, if a user account has been added to both policies, the user won’t be allowed to sign in, and you will see the aforementioned error message. Further ahead in this article, we are going to show you how to modify both of these policies to gain access to the computer. Note that these methods will only work if you have access to the local administrator account (on a Windows client PC) or the Domain Controller (in the case of Windows Server). Otherwise, you may want to connect with your domain administrator.

Fix the Disallowed Sign-In Method Error

Allow User to Log On Locally

The first thing you must do is add the user to the Group Policy “Allow log on locally.” The methods for this are slightly different on a Windows client computer and a Windows Server.

Allow User to Log On Locally on Windows 10, 11

Use the following steps to allow the user to successfully sign in on a Windows client computer:

Allow User to Log On Locally on Windows Server

This covers adding the user to the allowed list. However, we still have to check and ensure that the user is not on the deny list. Here, you will find all the users and groups that are allowed to log in to the computer. This will populate all of the users and groups in the list below. This will add the selected user or group to the “allow” list. Alternatively, you can restart the computer instead. The Group Policy Editor will now open. In this window, you will find all the users and groups that are allowed to log in to the server. This will populate all of the users and groups in the list below

Remove User from the Deny Logon List

Remove User from Deny Log on Locally on Windows 10, 11

Remove User from Deny Log on Locally on Windows Server

Performing the given steps above, whether on a Windows 10/11 PC or a Windows Server, you should now be able to sign into the account without encountering the “The sign-in method you’re trying to use isn’t allowed” error message. Here, you will find all the users and groups that are denied logging in to the computer. As you can see from the image above, the “Guest” account is denied access to log into the computer. This is the default Windows 10/11 setting. Alternatively, you can restart the computer instead. The Group Policy Editor will now open. In this window, you will find all the users and groups that are denied access to log in to the server. However, if these didn’t work, there are a few other things you may want to consider to fix the issue.

Disable Antivirus Software

Antivirus can block a user from signing in, especially if the computer is connected to a domain. In such an instance, you need to disable this antivirus software and check if it fixes the issue. Learn how to disable Windows Defender (Windows Security).

Closing Thoughts

The error “The sign-in method you are trying to use isn’t allowed” is encountered when trying to log in using a Guest account on a Windows client PC, or attempting to sign in on a Domain Controller with an account without domain administrative privileges. Regardless, you can still sign into the PCusin the very same account by making changes to the Group Policies, as discussed in this post. In this article, we have shown how to allow a user to sign into a PC if they are restricted, on both Windows 10/11 PCs and Windows Servers.