We can't sign into your account

[kestrel1]

I am currently trying to get over an issue with student users when logging in to Windows 10 (1607).

When I try and login with a student account I am getting the error:

We can't sign you into your account

 

I have looked on the Internet, but most of the solutions are to do with local accounts and not domain accounts.

It's obviously a GP setting that needs to be set or unset, because if I login with a staff account there are no issues.

If I click on Dismiss the actual domain login is fine, access to documents, applications etc all work.

We use Office 365, but have yet to setup SSO and as the staff accounts work OK, there must be a setting in a GP that is stopping the students signing in to something. The error message is about as useful as most Microsoft errors.

I don't want to continue deployment until I get this sorted out. I wonder if it is something to do with Office 365 Click-To-Run as I have installed this on my latest built and everything worked fine before that.

Any help would be appreciated.

[gh5000]

Anything useful in the event viewer? I would have hoped the reason code would be logged.

 

The computer isn't in a different OU to the one you normally use for student access? ie somewhere like a staff room OU where deny logon locally for students may be applied.

[kestrel1]

I have just had a look at the event logs and found some that may be relevent. I have attached a CSV file if you want a look. I will go through the errors and see if I can find anything that is useful.

 

The PC is in a new OU for the Windows 10 PC's. I get the same on other PC's as well. Staff Logins are good, students not.

 

I need to do a new image with 1703, but haven't currently got the time. If all else fails I will need to keep the student PC's on Windows 7 until I can figure this out.

 

Thanks for the help.

[gh5000]

Unless it's just that it's 11:50 and i'm glazing over.... I don't see an attachment.

 

It's possibly both...

[kestrel1]

You are correct, I either forgot or it didn't attach.

I will try again

 

I know its not a CSV, but I wasn't allowed to attach a CSV.

r41-pc.txt

Edited August 9, 2017 by kestrel1

[kestrel1]

I have found this:

https://jairocadena.com/2016/01/18/how-domain-join-is-different-in-windows-10-with-azure-ad/

Which may be related. I am not in school until next week, but if I get a chance I will remote in and take a look.