How to Fix a School Account Not Signing In to Copilot or Office Apps

When your university or school credentials fail to authorize your local software, it immediately halts academic work. Users frequently encounter endless login loops, error code 1001, or messages stating the account does not exist in the tenant. Resolving these authentication failures requires isolating whether the issue stems from local cached credentials, Windows device management policies, or backend licensing restrictions set by your educational institution. This guide provides direct diagnostic steps to restore your access.

Clear Conflicting Windows Credentials

The most common cause of authentication loops is a conflict between a previously logged-in personal Microsoft account and your new educational credentials. The Windows Credential Manager often attempts to pass the personal token to the enterprise login portal.

• Open the Windows Start menu, type Settings, and press Enter.
• Navigate to Accounts, then click Access work or school on the left panel.
• Locate your academic email address. Click it and select Disconnect. Confirm the prompt.
• Open the Start menu again, type Credential Manager, and launch the application.
• Click Windows Credentials.
• Scroll down to the Generic Credentials section. Click the dropdown arrow next to any entry starting with MicrosoftOffice16 or SSO_POP, and click Remove.
• Restart your computer. Open your document application and click Sign In at the top right to generate a fresh authentication token.

Verify Institutional Licensing for Microsoft Services

School IT administrators strictly control which applications students and faculty can access. Even if your login works for your student email portal, your account may lack the specific license required for desktop applications or generative AI features.

• Open a web browser and navigate to portal.office.com/account.
• Log in with your academic email and password.
• Click Subscriptions on the left sidebar, or click View Subscriptions under the main account panel.
• Review the list under "Licenses". You must see Microsoft 365 A3 or A5 for desktop application access. If you only see Microsoft 365 A1, you are restricted to web-only versions.
• To use the AI assistant, look for the Copilot for Microsoft 365 license. If this is missing, your school has not purchased or assigned the generative AI add-on to your specific user group.

Reset the Local Activation State via Command Prompt

If your school recently upgraded your license but the desktop software still refuses the sign-in, the background Office Software Protection Platform (OSPP) may be stuck on an old product key.

To flush the old license data:

• Type cmd in the Windows search bar. Right-click Command Prompt and select Run as administrator.
• Type cd "C:\Program Files\Microsoft Office\Office16" and press Enter. (If you use the 32-bit version on a 64-bit system, use Program Files (x86)).
• Type cscript ospp.vbs /dstatus and press Enter.
• Locate the line that reads Last 5 characters of installed product key. Note those five alphanumeric characters.
• Type cscript ospp.vbs /unpkey:XXXXX (replacing XXXXX with the characters you found) and press Enter.
• You should see "Product key uninstall successful". Restart your device, launch an application, and authenticate normally.

Alternative: Isolate the Session in a Private Browser

If your personal computer is blocking the desktop login due to Intune or Mobile Device Management (MDM) compliance policies enforced by the university, you can often bypass the local device check by restricting your session to the web.

• Open your web browser and launch a new Incognito or InPrivate window.
• Navigate directly to copilot.microsoft.com or microsoft365.com.
• Authenticate with your school credentials. Because the private window ignores local Windows single sign-on (SSO) tokens, it forces a direct connection to the cloud tenant, allowing you to work in the browser even if the local desktop software remains blocked.

Working with WPS Office for Uninterrupted Assignments

WPS Office cannot change your Microsoft-side administrative settings, bypass domain restrictions, or grant you a missing Copilot license. If your educational institution has locked your account or revoked access, you will remain unable to authenticate those specific services. However, if you need to draft essays, analyze spreadsheets, or utilize AI document tools immediately, WPS Office serves as a fully independent local solution.

• Open the WPS Office desktop application and click New to create a blank document.
• If you need generative text assistance for your coursework, highlight your text or click an empty line, then click the WPS AI tab on the upper ribbon.
• Select Write to generate new paragraphs based on your prompt, or use the Rewrite tool to adjust the academic tone of your existing draft.
• To submit your assignment in the standard university format, click Menu, hover over Save As, and select the .docx or .pdf file type. This ensures your professors can open your work regardless of the authentication issues plaguing your primary software.

Frequently Asked Questions

Why does the browser loop back to the login screen after entering my password?

This behavior indicates a corrupted session cookie in your browser. The authentication server recognizes your credentials but fails to pass the session token back to the local application. To resolve this, open your browser settings, navigate to privacy and security, and clear all cookies specifically for login.microsoftonline.com. You can also bypass this temporarily by signing in using a private browsing window.

Can my university block Copilot while allowing access to Word and Excel?

Yes. Enterprise data protection policies frequently separate standard document editing from generative AI tools. IT administrators often disable Copilot at the tenant level to prevent sensitive academic data or unpublished research from being processed by external language models. If your standard tools work but the AI assistant throws an access denied error, this is an intentional administrative policy.

How do I resolve the Azure AD Broker Error 1001 during sign-in?

Error 1001 occurs when the Windows Web Account Manager (WAM) fails to communicate with Azure Active Directory. To fix this, press Windows Key + R, type %localappdata%\Packages, and press Enter. Find the folder named Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy. Rename this folder to Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy.old and restart your computer to force Windows to rebuild the authentication broker upon your next login attempt.

Why does my account only work on the web versions and not the desktop downloads?

This is strictly a licensing tier issue. Many educational institutions issue Microsoft 365 A1 licenses to students to reduce IT budgets. The A1 tier only grants access to cloud-based web applications. You must have an A3 or A5 license assigned to your specific user profile to activate the locally installed desktop software. You can verify your current tier in your account subscription dashboard.