We managed to add the SSPR link on the win10 login screen using GPO (the device is hybrid joined). However when we click on the link we have this error message :the sign in method you are trying to use isn’t allowed…
According to https://community.spiceworks.com/topic/849103-you-cannot-log-on-because-the-method-is-not-allowedwe have to allow log on locally
ð To fix that, we granted to the account the permission to log on locally.
Q1 : is that really necessary? we are using deny log on locally except for legitim accounts (admins).
Now when we click on the link, we have no more this error message and before accessing to the SSPR portal, adefaultuser1 account is created. is that normal? it seems that the problem is known : https://github.com/MicrosoftDocs/azure-docs/issues/15584
Q2 : is that normal? what is the default user used for?
Thank you in advance.
Best regards,