How to Fix 'This login option is disabled because a login attempt failed” on Windows

php editor Xiaoxin introduces you a method to solve the "This login option is disabled due to a failed login attempt" error that appears on Windows. When you encounter this error when logging in to Windows, it may be caused by a problem with your password policy or user account settings. Solutions include changing password policies, resetting user passwords, enabling accounts, etc. By following the steps below, you can quickly fix this problem so that you can log in to your Windows system normally.

There are many reasons why Windows may encounter this error, such as a temporary glitch, a corrupted login PIN, or an incorrectly configured account. In order to resolve this issue and regain access to the computer, there are some troubleshooting steps we can take.

What causes the "Login option is disabled due to a failed login attempt" error?

The error message indicates that it may be caused by multiple failed login attempts or repeated shutdowns. However, even with the correct PIN, errors can occur for no apparent reason.

To resolve this error, you can try other login options, such as entering a password. If there is no password, you need to wait at least 2 hours before trying to log in again.

The exact cause of the problem is unknown. What we do know is that Windows uses dictionary attack mitigation to prevent threat actors from breaking into your computer to obtain unauthorized information. When triggered, Windows will temporarily ignore the provided authorization, possibly because your login PIN is identified as a potentially weak password.

Additionally, common factors that cause this error include a recent Windows upgrade, a corrupted login PIN or user profile, or a corrupted Windows image.

Fortunately, you can fix this error by resetting your login PIN and adjusting the registry to disable the account lockout option. Follow all the steps in the given order and you should be able to fix the error and successfully log into your Windows computer.

1. Keep your device powered on for two hours
If you do not have the backup login option enabled or have forgotten your password, you will need to wait two hours before trying to log in again using your login PIN. Make sure your computer stays on for two hours to work properly.

The two-hour cooling-off period seems to have conditions attached. After entering your PIN and seeing the wait two hours message, restart your computer. When the login screen appears, do not log in immediately. Wait two hours, then enter your PIN to log in.

That said, if you can't wait two hours, try logging in using an alternate login option, such as a password or biometric authentication. To use an alternate login option, click the dotted icon below the login option in the error screen to log in with a password.

2. Reset your account password from the login screen
If you forget your password, you can reset your login password from the login screen. To confirm the user's authenticity, Windows will require you to answer the security questions correctly before performing the reset.

In some cases, Windows may prompt you to sign in with your Microsoft account password and send a 4-digit code to your backup email address to verify the password reset attempt.

To reset your Windows account password:

At the login screen, enter any password and press Enter. Windows will display that the password is incorrect; click OK. Next, click on the Reset Password option. Now you must answer three security questions and press Enter. If the password is correct, the password reset option will appear. Enter your new password, then re-enter your password to confirm. Press Enter to log in to your user account.

After successfully logging in, you can reset your PIN, disable the login attempt threshold, and check the user profile configuration to see if your account has been disabled. Needless to say, you must sign in order to apply this fix.

If you are unable to log in, use a different user account on your computer and follow the steps below. If you've forgotten your account password, follow this resource to reset your forgotten Windows administrator password.

If you don't have an alternate user account set up, enable the built-in administrator account in Windows 11. Skip to the back of this article to learn how to enable the built-in administrator account without logging in.

After logging in, please follow the steps below to check your account status.

3. Check your account status using Local Users and Groups
Windows system administrators can use the Microsoft Management Console (MMC) snap-in, Local Users and Groups to manage user accounts and Group. To resolve this issue, check whether the account is configured as locked or disabled in the account properties.

Local users and groups are only available on the Professional and Enterprise editions of the operating system. If you're using Home, skip to the next solution.

Press Win R to open Run. Enter lusrmgr.msc and click OK. This will open the Local Users and Groups snap-in. Double-click the user folder. Find and right-click your user account name. Next, select properties. In the Properties dialog box, open the General tab. Here, uncheck the “Account is disabled” and “Account is locked” options. Click Apply and OK to save changes.

If both options are unchecked, proceed to the next solution.

4. Reset Windows Account PIN
Assuming the problem is caused by a corrupted account PIN, resetting the PIN can help you resolve the issue. You can change your account PIN in Windows through the Settings app. You'll need your current PIN to verify the PIN change process, so keep it handy.

If you forgot your PIN, use the "I forgot my PIN" option to reset your PIN through your Microsoft account. After resetting your PIN, log in using the new PIN and check if the error is resolved.

If this doesn’t work, run the following batch script to delete all users’ Pins. However, you must be logged in with an administrator account to execute this script. Here's how to do it.

Open the Notepad application. Search for Notepad in Windows Search and open the app. Next, copy and paste the following script into a Notepad file: Press Ctrl S to open the Save dialog box and name the file "Remove-Win-Account-PIN.bat." Next, click the "Save as type" drop-down list and select "All Files." Click Save to create the batch script.

To execute the script, double-click the script and click Yes when prompted by User Account Control.

When executed, this script will provide PIN codes for all user accounts on your computer. Once completed, you can set a new PIN for your user account on Windows.

5. Change the Account Lockout Threshold Policy
As with the dictionary attack mitigation feature, administrators can configure the local computer to specify the maximum number of incorrect login attempts. This is done by modifying the Account Lockout Threshold policy in Group Policy Editor.

Similar to local users and groups, the Group Policy Editor is only available by default on the Professional, Enterprise, and Education editions of the Windows operating system. Although it doesn't come out of the box, you can still enable the Group Policy Editor in Windows Home using a batch script hack.

Change Account Lockout Policy:

Press Win R to open Run. Type gpedit.msc and click OK to open the Group Policy Editor. Next, in the Group Policy Editor, navigate to the following location:
Computer Configuration\\Windows Settings\\Security Settings\\Account Policies\\Account Lockout Policy In the right pane, double-click Account Lockout Threshold. Enter 0 in the Account will not be locked field. Click Apply and OK to save changes.

6. Use Registry Editor to edit the account lockout policy
You can also configure the account lockout policy on your computer through the Windows Registry. It's also helpful if you're using a Windows Home edition that doesn't have Group Policy Editor.

There are risks in modifying the Windows registry. Before applying any changes to registry keys, create a restore point and take a registry backup.

To change the account lockout policy in Registry Editor:

Press Win R to open Run. Type regedit and click OK to open the Registry Editor. In the Registry Editor, navigate to the following location:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\AccountLockout In the right pane, find and right-click MaxDenials. Select Edit. Enter 0 in the Value data field and click OK to save changes. Close Registry Editor and restart your computer to apply the changes.

After restarting, you can log in without receiving a notification that login is disabled. If the problem persists, try clearing the TPM on Windows. This can be a tricky solution depending on how your account is set up. Clearing the TPM may lock you out of your computer. Only attempt this if you have the password-based login option enabled.

If all else fails, try a third-party recovery tool such as Trinity Rescue Kit. This is a useful little utility that can help you reset your password.

Resolving the "The logon option is disabled due to a failed attempt" error on Windows
Due to a glitch or system failure, Windows 10 and 11 computers may start up and lock you out of the system. However, you can bypass this cool-down period by logging in with your account password or resetting your PIN.

The above is the detailed content of How to Fix 'This login option is disabled because a login attempt failed” on Windows. For more information, please follow other related articles on the PHP Chinese website!