An integrated threat protection solution designed to detect, investigate, and respond to cyber threats across Microsoft 365 services.
The error indicates an invalid credential problem. Use the following steps to troubleshoot and fix it:
- Verify the username format
- If signing into a Microsoft Entra joined or hybrid-joined Windows device or service, use
******@domain.comformat. - If signing into a domain-only joined machine, use
DOMAIN\userformat. - To confirm the device join state on the target Windows machine, run in an elevated Command Prompt:
-
dsregcmd /status - In the Device State section:
-
AzureAdJoined : YES→ use******@domain.com. -
AzureAdJoined : NOandDomainJoined : YES→ useDOMAIN\user.
-
-
- If signing into a Microsoft Entra joined or hybrid-joined Windows device or service, use
- Confirm the password and account status
- Make sure the password is correct and not expired.
- Ensure the account isn’t locked out or disabled.
- If possible, change the password and try again.
- Check for account restriction policies
- Some accounts have restrictions such as:
- Time-of-day login restrictions.
- Restrictions on which workstations the account can log on from.
- Ask the directory or security administrator to verify that no such policies are blocking sign-in for this account from this device.
- Some accounts have restrictions such as:
- Test the same credentials directly on the target machine
- Sign in locally or via Remote Desktop to the same machine or service using exactly the same username and password that trigger this error.
- If sign-in fails there as well, use the on-screen error to further pinpoint whether it’s:
- Wrong username format.
- Password issue.
- Account restriction (logon hours, workstation restriction, etc.).
- If using Power Automate desktop flows or similar automation
- Recreate or edit the connection and re-enter the credentials with the correct format.
- Ensure the account used for the connection can sign in interactively to the target machine without errors.
If, after these checks, the credentials still fail but work elsewhere, contact the tenant or system administrator with the correlation ID, timestamp, and error code so they can review sign-in logs and policy configuration.
References: