How to Allow or Prevent User from Signing In Locally on Windows 10?

By default, users in the local groups Users, Guests, Backup Operators, and Administrators can sign in locally to Windows 10. However, an administrator can use local or domain Group Policy to restrict logins to Windows locally.

If, when logging in with a local account, you are getting the error “The sign in method you’re trying to use isn’t allowed. For more info, contact your network administrator”, this means that this user or group is not allowed to log on locally.

If you have administrator rights on your computer, you can allow specific users or groups to log on to Windows locally.

1. Run the local Group Policy Editor: Win+R > gpedit.msc;
2. Browse the following GPO section: Computer Configuration > Windows Settings > Local Policies > User Rights Assignment;
3. Find the policy Allow log on locally and open its properties;
4. Click the Add User or Group button and add the local accounts/groups to the policy that you want to allow sign in Windows locally;
   
5. Also, make sure there are no local accounts in the Deny log on locally policy. This policy takes precedence over the Allow log on locally settings.

By default, in Windows 10 and 11, users are allowed to log on locally if they are members of the following local groups.