Windows 11 locked me out of my own Microsoft account during an internet blackout.

Not because the password was wrong.
Not because the account was compromised.
Because Windows Hello + Microsoft auth decided they needed proper connectivity again.

What made this worse:

• International internet access was partially blocked
• VPN only worked inside a secondary local admin account
• Switching users killed the VPN tunnel
• Microsoft login traffic was not respecting normal proxy routing

After a lot of testing, this is what finally worked:

1. Logged into a local admin account
2. Ran v2rayN as administrator
3. Enabled TUN mode (critical part)
4. Connected VPN successfully
5. Instead of “Switch User”, used: Win + L
6. Logged into the main Microsoft account from the lock screen

That combination preserved the tunnel long enough for Windows auth services to reach Microsoft again.

Interesting detail:
Normal system proxy was NOT enough.
Windows login/auth traffic was bypassing it.
TUN mode fixed the routing at the network stack level.

Also discovered:

• Microsoft Store failures were related to the same routing issue
• Lock Screen behaves differently from Switch User regarding session/network persistence
• VPN behavior across Windows sessions is extremely inconsistent depending on implementation

This is one of those edge-case debugging sessions where official documentation is almost useless and you end up reverse-engineering Windows behavior live.

Maybe this helps someone else avoid a few hours of panic.