Sign-In Method Not Allowed: Contact Network Administrator

In this article, we shall discuss the fix to “The sign-in method you are trying to use is not allowed: For more information, contact your network administrator”. This error is a little bit self-explanatory. Please see How to create a contact in Active Directory, and How to Lock the Find My Device Option in Windows 11. Here is how to Prevent users from saving RDP Credentials on Windows 11.

With this, you will get such an error message at login as shown below.

Note: It simply means that this account is not granted permission to log on to the server

Note: This is a Domain controller and as such by default. Local user accounts are not granted access to logon the server.

Also, see Active Directory Contact and a User Account Object Differences. See “We cannot sign you with this credential because your domain isn’t available.

Fixing Sign-In Method Not Allowed For DCs

If you wish to permit domain users to access your Domain Controller.

Note: Access to DCs for standard users which leads to unauthorized Access, contact Network Administrator for Details error. This is not recommended, you can configure Group Policy Object to have this configured.

Launch the Gorup Policy Object Management Tool (gpmc.msc). Select your domain and expand Group Policy Objects then right click on “Default Domain Controller Policy” and click Edit

Under the Computer Management, 
- Expand Policies and
- Select Windows Settings

- Expand Security Settings and 
- Select Local Policies and then 
- Click on User Rights Management

- Right click on Allow Logon Locally and 
- Click on Properties

- On the other pane, Add the User of Group that you want

Alternative steps for fixing Sign-In Method Not Allowed

If the user is denied login access to the server. You must remove the user from the list of denied login access. To do this, launch the GPO and follow the path to fix this.

Enter "secpol.msc" in the Run dialog box or Contona Window. 
- Press Enter to open the Local Security Policy window.

Navigate to the Security Settings
- Local Policies 
- User Rights Assignment. 

In the right pane, locate the policy named Deny log on locally. 
- Double-click on it to modify by removing the user from the list.

I hope you found this blog post on the fix for “Sign-In Method Not Allowed: Contact Network Administrator” helpful. Please let me know in the comment session if you have any questions.