How to fix Error 1329 on Windows 11

by

Troubleshooting Guide: Error 1329 – “This user isn’t allowed to sign in to this computer”

Why This Error Happens

This error occurs when Windows applies User Rights Assignment policies (specifically “Deny log on locally” or “Deny log on through Remote Desktop Services”) that block the current account from signing in. It can also happen when the account isn’t included in the “Allow log on locally” policy, or when Group Policy settings inherited from a domain controller conflict with local security settings. Corrupted user profiles or incorrect local security policy configurations after a Windows update can also trigger this restriction.

Step-by-Step Resolution Guide

Step 1: Check Local Security Policy for Deny Restrictions

  • Press Win + R, type secpol.msc, and press Enter.
  • Navigate to Local Policies > User Rights Assignment.
  • Look for Deny log on locally and Deny log on through Remote Desktop Services.
  • Double-click each policy and check if your user account or group (e.g., “Users”) is listed. If present, select it and click Remove.

Step 2: Verify the Allow Log On Locally Policy

  • In the same User Rights Assignment window, locate Allow log on locally.
  • Double-click it and click Add User or Group.
  • Type your username or the group “Users” and click Check Names, then OK.
  • Click Apply, then OK to save changes.

Step 3: Check Group Policy for Domain-Joined Devices

  • Press Win + R, type gpupdate /force, and press Enter to refresh policies.
  • If the device is domain-joined, contact your IT administrator to check Group Policy Objects (GPOs) at the domain controller level, as domain policies override local settings.
  • Run gpresult /h report.html in Command Prompt to generate a report and identify which policy is causing the restriction.

Step 4: Create a New Local Administrator Account (If Profile Is Corrupted)

  • Boot into Safe Mode by holding Shift and clicking Restart from the Start menu.
  • Once in Safe Mode, go to Settings > Accounts > Other Users.
  • Click Add Account, create a new local administrator account, and sign in with it.
  • Use this account to fix permissions or restore access to the original profile.

Alternative or Verification Steps

  • After applying changes, restart the computer and attempt to log in with the affected account to confirm the error no longer appears.
  • If the issue persists, use System Restore (rstrui.exe) to roll back to a point before the error started occurring, especially if it began after a recent update or policy change.