Windows 11 Sign-In Restricted by Administrator: Here’s What You Need to Know
If you encounter the message An administrator has restricted sign-in when attempting to log into your Windows 11 or Windows 10 PC, this article aims to assist you in resolving the problem. This issue may arise if your device is not connected to the internet, or if users have secured their device using the Find My Device feature and are unable to unlock it. This action is typically taken when a device is lost or stolen, allowing the owner or administrator to restrict access until the device is recovered. The full error message reads:
An administrator has restricted sign-in. To sign in, make sure your device is connected to the internet and that your administrator signs in first.
Resolving the “An Administrator Has Restricted Sign-in”Issue in Windows 11
We recommend restarting both your computer and router, ensuring that your system is connected to the internet, and entering the correct password. If you are not the Administrator, have them sign in first, after which you can attempt to log in again. If that doesn’t help, consider the following solutions:
- Utilize Windows Startup Repair
- Edit the Windows Registry
- Change your Microsoft Account password online
- Enable the Super Administrator account
Let’s explore these options in detail.
1] Utilize Windows Startup Repair
If the error is due to corrupted system files or startup component issues, Startup Repair can scan and rectify these problems, potentially lifting the sign-in restriction.
To manually access and run Automatic Repair, boot into the Advanced Startup options. In this menu, select Troubleshoot > Advanced options > Automatic/Startup Repair.
You will be prompted to select a user account. Choose the appropriate account, enter the password if requested, and click Continue. Windows Automatic Repair will commence diagnosing startup-related issues and attempt automatic repairs.
After Startup Repair completes, restart your device and check if the sign-in problem is resolved.
2] Edit the Windows Registry
At the login screen where you are stuck, click the power icon in the lower right corner, hold down the Shift key, and choose Restart. This will boot your computer into the Windows Recovery Environment.
In the WinRE menu, select Troubleshoot, then Advanced Options, and then Command Prompt. This action will restart your system and boot into Command Prompt mode.
Once the Command Prompt window is open, type regedit and hit Enter to open the Registry Editor. In the Registry Editor, navigate to HKEY_LOCAL_MACHINE on the left-hand side. Next, go to the menu bar, click File, and select Load Hive.
In the pop-up Explorer window, go to the following directory:
This PC > C: drive > Windows > System32 > Config > Software
When prompted, enter ‘1234′ for the Keyname and click OK.
Afterward, in the Registry Editor, navigate to this path:
HKEY_LOCAL_MACHINE\1234\Microsoft\WindowsNT\CurrentVersion\PasswordLess\Device
In the right pane, locate the entry labeled DevicePasswordBuildVersion. Double-click it and change its Value data to 0.
Close the Registry Editor, return to the Command Prompt, type exit, and restart your system.
Once your computer restarts, you should see the available sign-in options. Select the option to log in with your Microsoft account and enter the credentials for the Microsoft account you were using previously. You should be able to access your account and log in to Windows normally.
3] Change Your Microsoft Account Password Online
If you locked your device remotely using the ‘Find My Device’ feature, you should generally be able to unlock it by signing in with your Microsoft account credentials. However, if you face difficulties even after entering the correct credentials, try changing your Microsoft account password.
To change your password, access your Microsoft account online, as changing it directly from the login screen of a locked Windows device is not possible.
Use another device to visit account.microsoft.com and log in using your existing credentials. Navigate to the Security tab and select Change my password. Follow the prompts to reset your password using the email address or phone number linked to your Microsoft account.
After resetting your password, wait a few minutes for the change to take effect. Then try signing in to your locked device using the new password, making sure the device has a stable internet connection to communicate with Microsoft’s servers for authentication.
4] Enable the Super Administrator Account
Next, activate the built-in Super Administrator account by booting into the Windows Recovery Environment. The Super Administrator account grants unrestricted access to your system, which can help fix issues blocking normal sign-in. Additionally, this account typically does not require a password, unless one has been configured, allowing easier access even if other accounts are locked out.
Reboot into WinRE from the login screen as explained in Fix 2. In the WinRE menu, select Troubleshoot > Advanced options > Command Prompt.
With the Command Prompt window open, type the following command and press Enter:
net user administrator /active:yes
You should see a message saying ‘The command completed successfully‘.
Close the Command Prompt by typing exit and pressing Enter. Click on Continue to restart your system. You should now find the Administrator account available on the login screen.
Log in to this account to resolve the lock or access issues.
I hope this information assists you.
How Can I Remove Administrator Restrictions in Windows 11?
If you have access to another account with administrative rights, log in with that account. Navigate to Settings > Accounts > Other users. Find the account you want to change, click on it, and select Change account type. Choose Administrator from the drop-down and click OK. The account will then acquire administrative privileges. Sign in to verify the changes.
How Can I Remove the Administrator Account from the Windows 11 Login Screen?
Log in using an account with administrative privileges. Press Win + X and select Computer Management. Go to Local Users and Groups > Users, locate the Administrator account, right-click it, and choose Properties. Check the option for ‘Account is disabled‘, then click Apply and OK. Restart your computer to apply the changes; the Administrator account will no longer display on the login screen.
Leave a Reply