Windows: «Sign-in is not allowed right now. Contact IT support.»

Symptom

After the password, Windows shows «Sign-in is not allowed right now. Contact IT support.» and sends no request to the phone.

Cause

The service refused the sign-in before asking for approval. The administrator sees the reason in the computer's «Sign-ins» history:

The computer may also be disabled or retired.

Fix

User: contact IT support with the computer's name and the time. If the reason is «no phone or app enrolled», link a phone in the console from another computer.

Administrator:

1. Open «Manage» › «Computers» and the computer concerned.
2. Check the reason for the last attempt.
3. Policy: test the decision for the person and computer; adjust the rule.
4. Unknown account: check the account mapping; see Map Windows accounts.
5. Disabled computer: re-enable it, if appropriate.

When to escalate

If everything is correct and the refusal persists, collect the agent's logs and contact support.