Factory reset Microsoft Account Admin information, it always showed incorrect

Question

Everytime when I tried to download software, the window will ask me to provide admin email and password, and after I typed in my Microsoft 365 business password, it always showed that was incorrect.

Answer 1

Hello Chenyang Rickard,

How is your issue going? To add to my previous answer, the User Account Control elevation prompt is rejecting your Microsoft 365 business password because your cloud identity does not currently possess local administrative privileges on this specific Windows installation. If you are operating a personal computer, the consent.exe process is attempting to authenticate against the local Security Account Manager database rather than your cloud tenant. You must bypass the cloud prompt by entering the credentials of the local administrator account created during the initial Windows Out-of-Box Experience, formatting the username as .\LocalAdminName to force local authentication. Conversely, if this is a corporate-joined device, your User Principal Name simply lacks the required directory role assignment. Following Microsoft Entra deployment best practices, your global administrator must explicitly grant these rights by assigning your identity the Microsoft Entra Joined Device Local Administrator role via the Entra admin center under the device settings blade. For environments managed by Microsoft Intune, the administrator should deploy an Endpoint Security policy utilizing the Local User Group Membership profile to securely inject your Entra ID Object ID into the local Administrators group, which maps to SID S-1-5-32-544. Until this directory role is assigned and the device completes a primary refresh token sync, Windows will continue to reject your M365 credentials for software installations.

Hope this answer brought you some useful information. If it has, please consider accepting the answer so that other people sharing the same issue would benefit too. Thank you :)

VP

Answer 2

Hello,

The issue is that the Windows security subsystem does not recognize your Microsoft 365 Business account as possessing a valid Local Administrator token for the consent.exe elevation prompt. To provide the most optimal solution, I need you to clarify two details: is this device currently managed by Microsoft Intune, and did you perform the initial Windows setup using the exact same business credential that is now failing? If this endpoint is corporate-owned and managed via Intune, the robust, best-practice resolution requires your tenant administrator to deploy an Endpoint Security policy utilizing the Local User Group Membership configuration profile. This mechanism securely injects your Entra ID Object ID directly into the local Administrators group mapping (SID S-1-5-32-544) without relying on fragile local console edits.

If you are operating without Intune mobile device management, you must verify the exact cryptographic trust state of the machine before attempting further software installations. Open a standard command prompt and execute dsregcmd /status to check your Primary Refresh Token (PRT) and domain join status.  If the device state indicates it is fully Entra ID joined but the UAC prompt still rejects your User Principal Name (UPN) password, your cloud account simply does not hold the necessary Device Administrator directory role. You must ensure you are entering your pure UPN formatted strictly as your email address, as modern Windows authentication brokers no longer require legacy prefixes. Should the local SAM database remain corrupted by a previously linked personal Microsoft account, the only officially supported path to establish a clean Entra ID trust is to execute a full system reset and ensure you exclusively select "Set up for work or school" during the initial deployment phase.

Hope you found something useful in the answer. If it helped you get more insight into the issue, please consider accepting it. Thank you and have a nice day!

VP

Answer 3

If you are having trouble with incorrect admin email and password prompts when trying to download software, it may be due to a few reasons. Here are some steps you can take to troubleshoot the issue:

1. Verify Email and Password: Ensure that you are entering the correct Microsoft 365 business email and password. You can try signing in to the Microsoft 365 admin center to confirm your credentials.
2. Password Reset: If you suspect that your password might be incorrect, you can reset it using the Self-Service Password Reset wizard if you have the necessary permissions. If not, ask your administrator to reset your password.
   • For work or school accounts, use https://passwordreset.microsoftonline.com.
   • For personal Microsoft accounts, use https://account.live.com/ResetPassword.aspx.
3. Check Account Status: Ensure that your account is active and not blocked or disabled. If your account is blocked, you may need to wait and try again or reset your password to unblock it.
4. Contact Support: If the issue persists, consider reaching out to Microsoft Support for further assistance. They can help you troubleshoot the issue more effectively.

These steps should help you resolve the issue with the incorrect admin email and password prompts.