Error message received when trying to sign in

Problem

When trying to sign in, your users get the following error message:
Your administrator doesn't allow you to sign in with this account. Try a different account.

Environment

  • Mobile Device Management
  • Google Credential Provider for Windows

Solution

If only one device is affected you must follow the steps described below:
  1. From the Windows Start menu, click Run.
  2. In the Run box, enter regedit.
  3. In Registry Editor, go to HKEY_LOCAL_MACHINE\Software\Google, right click Google, and click New > Key to create a folder.
  4. Name the folder GCPW.
  5. Right click the GCPW folder and click New > String Value.
  6. For the name, enter:
    domains_allowed_to_login
  7. Double click the name and, in the Value data box, enter a comma separated list of allowed domain names. For example: example.com, example.org, example.net.
  8. Click OK.
  9. Your users should now be able to log in using GCPW.

Cause

The device is unable to download the policy from the Admin console or there is a missing registry key, making GCPW go to its default setting which is not allow any domain.