How to fix Microsoft Store log in error 0x800704ec in Windows?

0x800704ec in the Microsoft Store means a policy on the PC forbids apps from signing in with a Microsoft account. On a work PC that block is usually on purpose. On your own PC, find who set it: a connected work or school account, a Group Policy setting or a registry value.

Facts checked on 15 October 2026. Steps written for Microsoft Store sign-in on Windows 11 (25H2 and 26H2) and Windows 10 22H2, read against Microsoft Learn policy documentation and Microsoft Q&A.

What Microsoft Store error 0x800704ec means

You open the Microsoft Store, select Sign in and pick your account. Instead of your profile picture, a window says This program is blocked by group policy. For more information, contact your system administrator. with the code 0x800704ec. The Store still lists apps, but it will not let you sign in, install paid apps or see your library.

The code is Windows error 1260 written in hexadecimal (0x4EC is 1260). It does not mean a broken Store. It means Windows checked its policies and found one that forbids the action. A user on Microsoft Q&A who could open the Store but not sign in also saw the same block in Whiteboard, which fits a policy that covers every app.

What causes error 0x800704ec in the Microsoft Store, ranked

Microsoft does not publish how often each cause occurs. The order below follows how the policy is set and what users report with this code. It is our reading, not a statistic.

Microsoft's policy page explains why the error seems to appear out of nowhere. An app that signed you in before the block keeps working until its saved sign-in expires. The day you sign out, or the sign-in expires, the Store cannot sign you back in.

How to fix Microsoft Store error 0x800704ec

Fix 1 to Fix 4 each check one place where the block can be set. Stop at the first one you find, restart, and try Sign in in the Store again. If the PC belongs to your employer or school, do not change these settings: ask the IT team, because the block is deliberate there.

Fix 1. Check for a work or school account connected to Windows

5 minutesLow riskYou use a second account for work or school on this PC, or the PC was once used at a company.

Microsoft publishes this block as a device policy that management services can set remotely. Connecting a work account can enrol the PC, and the organisation's rules then forbid personal Microsoft accounts in apps.

1. Press Win + I and open Accounts > Access work or school.
2. Look at the list. An entry such as Connected to ... Azure AD or Work or school account with a company name means the PC is linked to an organisation.
3. Select the entry and look for an Info button. If it is there, the organisation manages the PC and can set policies on it.
4. If this is your own PC and you no longer need that connection, select Disconnect and confirm.
5. Restart the PC and try Sign in in the Microsoft Store again.

Fix 2. Set Block all consumer Microsoft account user authentication to Not Configured

5 minutesLow riskWindows 11 or Windows 10 Pro, Enterprise or Education, with no work account in Fix 1.

This is the policy that produces the Store block. Microsoft says that when it is enabled, all applications and services on the device are prevented from using Microsoft accounts. Its default is Disabled.

1. Press Win + R, type gpedit.msc and select OK. If Windows says it cannot find it, you have Windows Home: go to Fix 3.
2. Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft account.
3. Double-click Block all consumer Microsoft account user authentication.
4. Select Not Configured (or Disabled) and select OK.
5. Open Terminal (Admin) and run this command so the change applies now:

   gpupdate /force

6. Restart the PC and sign in to the Store again.

If the setting turns back to Enabled after a restart, something outside the PC sets it again: that is a managed PC, and Fix 1 or the IT team is the answer. All steps of the editor: Open the Local Group Policy Editor.

Fix 3. Remove the DisableUserAuth registry value

10 minutesRead the warningWindows Home, where there is no Group Policy editor, or Fix 2 showed Not Configured but the error stays.

Microsoft documents that the policy is stored as the value DisableUserAuth under HKLM\Software\Policies\Microsoft\MicrosoftAccount. A tool or script can write it directly, even on Home, and then the editor in Fix 2 does not show it.

1. Right-click Start and open Terminal (Admin). On Windows 10 open Windows PowerShell (Admin). Check whether the value exists:

   reg query "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftAccount" /v DisableUserAuth

2. If the result says ERROR: The system was unable to find the specified registry key or value, the value is not set. Go to Fix 4.
3. If it shows DisableUserAuth REG_DWORD 0x1, the block is on. Back up the key as the warning above says.
4. Delete the value:

   reg delete "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftAccount" /v DisableUserAuth /f

5. Restart the PC and sign in to the Store again.

Fix 4. Turn off Accounts: Block Microsoft accounts in Local Security Policy

5 minutesLow riskWindows Pro or higher, and you also cannot add a Microsoft account or switch a local account to one in Settings.

This second policy can stop existing Microsoft accounts from being used through Settings. We could not confirm that it shows 0x800704ec in the Store, but it blocks the same accounts and is worth one check.

1. Press Win + R, type secpol.msc and select OK.
2. Go to Local Policies > Security Options.
3. Double-click Accounts: Block Microsoft accounts.
4. If it shows Users can't add or log on with Microsoft accounts or Users can't add Microsoft accounts, choose This policy is disabled and select OK.
5. Restart the PC and try the Store again.

Microsoft's page for this setting says that disabled or not configured is the recommended state on a personal PC, and that the change works without a restart. A restart still clears what the Store has cached.

Fix 5. Clear the Microsoft Store cache, then repair or reset the Store

10 minutesLow riskYou removed a policy in Fix 1 to Fix 4 and the Store still shows 0x800704ec, or no policy was set at all.

The Store keeps its own sign-in state. After a policy is removed, a stale refusal can stay in that cache. Clearing it makes the Store ask Windows again, now without the block.

1. Close the Microsoft Store.
2. Press Win + R, type wsreset.exe and select OK. A blank window opens, and after a short wait the Store opens by itself.
3. Try Sign in. If it still fails, open Settings > System > System components on Windows 11 (on Windows 10, Settings > Apps > Apps & features) and open the advanced options of Microsoft Store.
4. Select Repair. If that does not help, select Reset.
5. Restart the PC and sign in again.

Reset deletes the Store app's data on this PC, but your purchases stay in your Microsoft account. Every screen: Reset the Microsoft Store.

Fix 6. Repair Windows system files

20 minutesLow riskEvery policy is clear, the Store is reset, and the error still appears.

If no policy is set, Windows should not report a policy block. Damaged system files that read policies wrongly are the last plausible cause on a personal PC, and the SFC and DISM repair checks them.

1. Open an elevated command window. Right-click Start and select Terminal (Admin), or type cmd in the search box, right-click Command Prompt and select Run as administrator. Select Yes when Windows asks for permission.
2. Run DISM first. Type the command below and press Enter. DISM downloads clean copies of damaged components from Windows Update, so it can take several minutes. Wait until it says The operation completed successfully.

   DISM.exe /Online /Cleanup-Image /RestoreHealth

3. Run System File Checker. In the same window, type the command below and press Enter. Do not close the window until the verification reaches 100%.

   sfc /scannow

4. Read the result and restart. Compare the last message with the table below this guide, then restart the PC so that repaired files are loaded.

These steps were written for Windows 11 24H2 and 25H2. The full page with the other versions and what each result means: Run DISM and SFC to repair Windows system files

If 0x800704ec is still there: what to check and whom to ask

Many reader comments on this page, in Russian, German, Dutch, French, Portuguese and Indonesian, say the fixes did not help. In almost every such case the block is set from outside the PC. Work through this list.

• See which policies are applied: open Terminal (Admin) and run gpresult /h "%USERPROFILE%\Desktop\gp.html". Open the report on the desktop and search it for Microsoft account. It names the source of each setting.
• A work or school PC: the IT team set the block on purpose. Ask them, or use the Store on a personal PC. Removing it yourself breaks the company's rules and may come back with the next sync.
• A second-hand PC from a company: if Access work or school shows an organisation you do not belong to, the PC is still enrolled. A clean Windows install does not always remove that link; ask the seller for a release.
• Your own PC, no policy anywhere: update Windows under Settings > Windows Update, then contact Microsoft support and send the gp.html report with the list of fixes you tried.

How to keep 0x800704ec from coming back

The block only returns when someone or something sets the policy again. These habits keep a personal PC free of it.

• Add a work account only to the apps that need it. When Outlook or Teams asks to let your organisation manage the device, choose the option to sign in to this app only.
• Read what privacy and hardening tools change. Many of them apply a list of policies, and blocking consumer Microsoft accounts is a common item. Undo that one item if you use the Store.
• Check Access work or school after a job change, and disconnect organisations you left.
• Keep a registry export of any key you change, so you can undo it later.

If you use one PC for work and home, a separate Windows user for work keeps the two apart. Our guide to Microsoft account login error 0x80048820 covers the case where the sign-in fails without a policy message.

Frequently asked questions

What is error 0x800704ec?

It is Windows error 1260, with the text "This program is blocked by group policy. For more information, contact your system administrator." A policy on the PC forbids what the program tried to do. In the Microsoft Store that is signing in with a Microsoft account. Find where the policy is set: a work or school account (Fix 1), Group Policy (Fix 2) or the registry (Fix 3).

Why do I get error 0x800704ec when I have no system administrator?

On a home PC you are the administrator, and the message means a setting was changed by a program, a script or an organisation you connected. The most common source is a work or school account added under Access work or school, which lets the organisation apply its rules. A tweak or privacy tool that writes the DisableUserAuth value is the next. Fix 1 to Fix 3 check each one.

Can I fix 0x800704ec on Windows Home without gpedit?

Yes. Windows Home has no Group Policy editor, but the policy is stored in the registry as DisableUserAuth under HKLM\SOFTWARE\Policies\Microsoft\MicrosoftAccount. Fix 3 shows the command that checks it and the one that deletes it. Export the key first so you can undo the change. Do not install a downloaded gpedit package for Home: you do not need it here.

Will removing my work account fix the Microsoft Store?

Often, if the organisation applies the block through device management. Disconnecting removes its policies at the next sync and restart. It also removes your access to company email, files and apps on this PC, so check with the IT team first if you still need them. On a PC your employer owns, do not disconnect: ask them instead.

I get 0x800704ec when I turn on Microsoft Defender. Is it the same problem?

It is the same code with the same meaning, a policy blocks the action, but a different policy. This page is about the Microsoft Store sign-in. Users report the Defender case when another antivirus is installed or was not removed cleanly, because it turns Defender off. Removing the leftover antivirus is the usual path there, not the steps on this page.

Does 0x800704ec also appear in OneDrive or Office?

Yes, users report the same code in OneDrive for Business and Office sign-in. The meaning does not change: a policy on the PC blocks the sign-in. In a work setting that is usually a company rule for which accounts may be used, so the IT team is the first contact. On a personal PC, check the same places as in Fix 1 to Fix 4.

Will I lose my apps or purchases?

No. Purchases belong to your Microsoft account, not to the PC. The block only stops apps on this PC from using the account. Installed apps keep working, and your library comes back as soon as the Store can sign in. You can still see your orders at account.microsoft.com in a browser, because Microsoft says the policy does not affect web sign-in.

Does the Windows Store Apps troubleshooter fix 0x800704ec?

We do not expect it to. The troubleshooter checks Store settings, cache and app registration, but it does not change policies, which are the cause of this code. It does no harm to run it, but go straight to Fix 1 to Fix 4 first. For other Store problems, see our guide to the Windows Store Apps troubleshooter.

What does код ошибки 0x800704ec mean?

It is the Russian search for "error code 0x800704ec". The meaning is the same in every language: the Microsoft Store, or another app, is blocked by a policy from signing in with a Microsoft account. The fixes on this page are in English, and the menu names in a Russian Windows have the same places: Access work or school, the Group Policy editor and the registry.