I can't log into my computer

Question

I can't log into my computer

Shayah Smiley 0

Xxxx is Microsoft Entra joined. Offline inspection confirms CloudDomainJoin JoinInfo for "email", a matching Local Machine certificate, TPM 2.0 initialized and not locked, CloudAP and Microsoft credential-provider binaries present, and no third-party credential-provider filter. SFC finds no corruption. However, valid Entra credentials are rejected at Winlogon, including a separate Entra administrator account, and those attempts produce neither Security Event 4625 nor an Entra sign-in event. Please assist with testing/recovering the Entra device private key/CloudAP device-authentication state without reinstalling Windows. I removed the machine name and email on purpose if it's absolutely needed I can share.

0 comments

1 answer

Your answer

Answer 1

Hi Shayah,

Since even a separate Entra administrator account fails and no Entra sign-in event is generated, I would focus on the device authentication/CloudAP state rather than the user credentials.

From an elevated Command Prompt, run dsregcmd /status and check DeviceAuthStatus and KeySignTest. Microsoft states that DeviceAuthStatus should be SUCCESS and KeySignTest should be PASSED. A failed KeySignTest can indicate that the device key is no longer usable and recovery is required.

Also check Event Viewer under Applications and Services Logs > Microsoft > Windows > AAD for CloudAP errors. Microsoft specifically uses these logs for troubleshooting Entra authentication and PRT failures.

I would avoid clearing the TPM or deleting certificates manually at this stage. If you can access Windows through a local administrator account, Microsoft’s Entra device troubleshooter can collect the authentication logs and help determine whether recovery/re-registration is required without reinstalling Windows.

Thank you, and feel free to respond back for more assistance.