Windows 11 locked me out of my own Microsoft account during an internet blackout.
Not because the password was wrong.
Not because the account was compromised.
Because Windows Hello + Microsoft auth decided they needed proper connectivity again.
What made this worse:
- International internet access was partially blocked
- VPN only worked inside a secondary local admin account
- Switching users killed the VPN tunnel
- Microsoft login traffic was not respecting normal proxy routing
After a lot of testing, this is what finally worked:
- Logged into a local admin account
- Ran v2rayN as administrator
- Enabled TUN mode (critical part)
- Connected VPN successfully
- Instead of “Switch User”, used: Win + L
- Logged into the main Microsoft account from the lock screen
That combination preserved the tunnel long enough for Windows auth services to reach Microsoft again.
Interesting detail:
Normal system proxy was NOT enough.
Windows login/auth traffic was bypassing it.
TUN mode fixed the routing at the network stack level.
Also discovered:
- Microsoft Store failures were related to the same routing issue
- Lock Screen behaves differently from Switch User regarding session/network persistence
- VPN behavior across Windows sessions is extremely inconsistent depending on implementation
This is one of those edge-case debugging sessions where official documentation is almost useless and you end up reverse-engineering Windows behavior live.
Maybe this helps someone else avoid a few hours of panic.
