How to fix Error 224 on Windows 11

by

Windows 11 Troubleshooting Guide: Error 224 – Access Denied (Trusted Sites Login)

Why This Error Happens

Error 224 occurs when Windows attempts to authenticate access to a network resource (such as a shared drive, SharePoint site, or web-based file location) but the site is not recognized as a trusted zone in Internet Explorer/Edge security settings. This typically happens because the URL or UNC path falls under the “Internet” or “Restricted” security zone by default, which blocks automatic credential passthrough (NTLM/Kerberos authentication). Additionally, corrupted cached credentials in Windows Credential Manager can trigger this error even if the site is correctly configured as trusted.

Step-by-Step Resolution Guide

  1. Add the site to Trusted Sites via Internet Options
  • Press Windows + R, type inetcpl.cpl, and press Enter.
  • Go to the Security tab → select Trusted Sites → click Sites.
  • Enter the exact URL (e.g., https://yourcompany.sharepoint.com) and click Add.
  • Uncheck “Require server verification (https:)” only if the site uses HTTP.
  1. Configure Automatic Logon for Trusted Sites
  • While still in the Security tab, with Trusted Sites selected, click Custom Level.
  • Scroll to User Authentication → Logon.
  • Select Automatic logon with current user name and password.
  • Click OK, then Apply.
  1. Verify Group Policy / Registry Settings (for domain-joined PCs)
  • Press Windows + R, type gpedit.msc, and press Enter.
  • Navigate to: User Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page.
  • Ensure Site to Zone Assignment List is not overriding your manual trusted site entry via GPO.
  1. Clear Cached Credentials
  • Open Control Panel → Credential Manager → Windows Credentials.
  • Locate any stale entries related to the site/server causing Error 224.
  • Click Remove and re-enter credentials when prompted next time.
  1. Restart the Affected Application
  • Close and reopen the application (e.g., Excel, browser, or file explorer) accessing the resource to force it to re-read the updated security zone settings.

Alternative or Verification Steps

  • Verify the fix: Open the file location again in File Explorer or the application; the Error 224 prompt should no longer appear, and login should occur silently using your current Windows credentials.
  • Alternative solution: If the error persists, map the resource as a network drive using explicit credentials (net use Z: \\server\share /user:domain\username) to bypass the browser-based trusted site authentication mechanism entirely.