Windows 11 Setup Locked My Microsoft Account After BIOS Update - How to Avoid This?

[inner steppe]

Hi everyone,

I’m reinstalling Windows on an old laptop that originally ran Windows 10. After upgrading the RAM and SSD, I used a recovery USB to reinstall Windows, but it automatically installed Windows 11.

During setup, I had to sign in with a Microsoft account (no option for a local account), so I created a new one since this laptop is shared by my family. Everything worked fine until a BIOS update came through Windows Update.

After the restart, it said my PIN was no longer valid due to security changes. When I tried to create a new PIN, it threw an error. I used the recovery email to log in, but now my Microsoft account is locked/suspended for unknown reasons. I can reset the password, but it still won’t let me sign in.

I’m planning to reinstall again, but how can I avoid this issue next time? Does Microsoft now block accounts not tied to verified personal info?

Thanks in advance!

[open hawk]

seems to be a thing with doing certain updates

easiest way to go about it if you just dont want to deal with it is disable windows hello and make it go to the microsoft account password once its set up

typically in settings > accounts > sign-in options

or you could go through the massive hassle that is creating a local account in oobe

at least its not bitlocker :)

[inner steppe]

True 😂

The main issue for me was the fact that this was an old laptop and I wanted to use the recovery media to make sure I don't miss any of the drivers for the laptop. I couldn't be arsed to go hunt down missing drivers.

[open hawk]

fair enough

[inner steppe]

If I was doing a fresh install on my PC, I would have gone with the hassle of using rufus to create a local account

[open hawk]

even manually installing the drivers is tedious (i just did that on my laptop fairly recently)

[inner steppe]

Oh I can imagine that nightmare

I wish they still had the option for local account. This online account stuff is so annoying.

[open hawk]

same

too many issues with windows hello pin and bitlocker honestly for me to even think about considering a microsoft account again (i used to work as a repair tech and these were our top 2 windows issues as of late)

[short nexus]

That happens when the TPM becomes invalid due to firmware changes

[inner steppe]

I suspected as much but not sure why Microsoft decided to lock the account

[short nexus]

in that case I guess you need to use the account recovery form to contact microsoft support

[inner steppe]

In the end, I just decided to reinstall and setup a local account. I suppose that would be better for my parents as they aren’t really tech savvy

[inner steppe]

The irony of that is MS asking me to sign in to access their recovery form. I swear they are weird sometimes.

[short nexus]

[inner steppe]

It was s loop of them forcing me to change my password and then saying my password is incorrect. Any other method not available at this time. Eventually I just gave up.

[gloomy prawn]

what happen is, TPM stores PIN, face, and etc. but during a firmware update... likely the TPM isn't doing its job anymore or some how got flashed

[inner steppe]

Oh yes. I already assumed that is the reason for the PIN to get reset. The issue is that they have now blocked that account.

In the end I ended up reinstalling everything and going for a local account for my family.

At least for as long as they allow it.

I suppose I should mark this as solved/resolved.