Windows Login Problems

Problem

A user cannot log into a Windows computer, either locally or with a domain/Microsoft account.

Symptoms

• "Incorrect password" despite a correct password
• Stuck on "Welcome" or a black screen after entering credentials
• Trust relationship or domain-related error message

Possible Causes

• Caps lock or keyboard layout mismatch
• Expired or locked-out account
• Corrupted user profile
• Broken trust relationship with the domain
• Recent password change not yet synced (cached credentials)

Diagnostic Steps

1. Confirm caps lock and keyboard layout
2. Try logging in with a different known-good account on the same machine
3. Check Event Viewer (Windows Logs > Security) for the specific failure reason
4. If domain-joined, check for a "trust relationship" error specifically

Commands & Tools

Step-by-Step Solution

1. For a locked/expired account, have an admin unlock or reset it in Active Directory or the local user manager
2. For a corrupted profile, create a new local profile and migrate the user's data manually
3. For a broken trust relationship, remove the machine from the domain, restart, then rejoin the domain
4. For cached-credential mismatches after a recent password change, allow one successful login while connected to the corporate network/VPN to resync

Verification

User can log in normally, reaches the desktop without errors, and can access expected network resources.

Common Mistakes

• Resetting the password repeatedly without checking if the account is simply locked
• Rejoining the domain without first removing the machine cleanly
• Deleting a profile without backing up user data first

Escalation Criteria

Prevention

Educate users on password expiry timing, enable self-service password reset where available, and monitor for repeated lockouts as a security signal.

Related Articles