Windows 10: Enable or Disable Domain Users to Sign in with PIN to Windows 10

How to: Enable or Disable Domain Users to Sign in with PIN to Windows 10


Information Windows Hello in Windows 10 enables users to sign in to their device using a PIN (Personal Identification Number). You can use this PIN to sign in to Windows, apps, and services.

One important difference between a password and a Hello PIN is that the PIN is tied to the specific device on which it was set up. That PIN is useless to anyone without that specific hardware. Someone who steals your password can sign in to your account from anywhere, but if they steal your PIN, they'd have to steal your physical device too!

Even you can't use that PIN anywhere except on that specific device. If you want to sign in on multiple devices, you have to set up Hello on each device.

For more details, see:

• Why a PIN is better than a password (Windows 10)
• Changes to Convenience PIN / Windows Hello Behavior in Windows 10 Version 1607

By default, PCs joined to a domain cannot sign in using a PIN unless enabled via policy.

This tutorial will show you how to enable or disable allowing domain users to set up and sign in to Windows 10 using a PIN.

You must be signed in as an administrator to enable or disable PIN for domain users.

CONTENTS:

• Option One: To Enable or Disable Domain Users Sign-in using PIN in Group Policy
• Option Two: To Enable or Disable Domain Users Sign-in using PIN using a REG file

OPTION ONE [/i] To Enable or Disable Domain Users Sign-in using PIN in Group Policy


Note Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education Option TWO below though.

1. Open the Local Group Policy Editor.

2. In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)
*Arrow Computer Configuration\Administrative Templates\System\Logon




3. In the right pane of Logon in Local Group Policy Editor, double click/tap on the Turn on convenience PIN sign-in policy to edit it. (see screenshot above)

4. Do step 5 (enable) or step 6 (disable) below for what you would like to do.


5. To Enable Domain Users Sign-in using PIN
A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)

6. To Disable Domain Users Sign-in using PIN
A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

NOTE: Not Configured is the default setting.




7. When finished, you can close the Local Group Policy Editor if you like.




OPTION TWO [/i] To Enable or Disable Domain Users Sign-in using PIN using a REG file


Note The .reg files below will add and modify the DWORD value in the registry key below.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System

AllowDomainPINLogon DWORD

0 or (delete) = Disable
1 = Enable

1. Do step 2 (enable) or step 3 (disable) below for what you would like to do.


2. To Enable Domain Users Sign-in using PIN
A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Enable_Domain_users_PIN_Sign-in.reg

Download

3. To Disable Domain Users Sign-in using PIN
NOTE: This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Disable_Domain_users_PIN_Sign-in.reg

Download
4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. If prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7. If you like, you can now delete the downloaded .reg file.

That's it,
Shawn


Related Tutorials

• How to Join a Windows 10 PC to a Local Active Directory Domain
• How to Enable or Disable Domain Users to Sign in to Windows 10 using Biometrics
• How to Enable or Disable Domain Users to Sign in with Picture Password to Windows 10
• How to Add a PIN to your Account in Windows 10
• How to Change the PIN for your Account in Windows 10
• How to Remove PIN from your Account in Windows 10
• How to Reset the PIN for your Account in Windows 10
• How to Enable or Disable PIN Reset at Sign-in in Windows 10
• How to Enable or Disable Require Digits for PIN in Windows 10
• How to Enable or Disable Require Lowercase Letters for PIN in Windows 10
• How to Enable or Disable Require Uppercase Letters for PIN in Windows 10
• How to Enable or Disable Require Special Characters for PIN in Windows 10
• How to Specify a Maximum and Minimum PIN Length in Windows 10
• How to Enable or Disable PIN Expiration in Windows 10
• How to Enable or Disable PIN History in Windows 10
• How to Enable or Disable Show Local Users on Sign-in Screen on Domain Joined Windows 10 PC

:)

 

How do I re-enable PIN + Fingerprint sign-in for domain PCs?


A previous GPO tech set these to be disabled by default and I can't figure out how to re-enable. The options stay greyed out no matter what I try. I don't want to remove the settings to disable from the default policy so I have created an additional GPO for certain PCs to have it enabled and I'm just trying to find all of the settings to get this working again for the approved users.

This is what I have set currently...
In Computer -> Policies -> Admin Templates:
System/Logon -> Turn on PIN sign-in = Enabled
Windows Components/Biometrics -> Allow domain users to log on using biometrics = Enabled
Windows Components/Biometrics -> Allow users to log on using biometrics = Enabled
Windows Components/Biometrics -> Allow the use of biometrics = Enabled
Windows Components/Microsoft Passport for Work -> Use biometrics = Enabled
Windows Components/Microsoft Passport for Work -> Use Microsoft Passport for Work = Enabled

Any suggestions are most welcome

Thanks

 

Disabling User Passwords Disables PIN and Hello?

Hello Eric,

Thank you for posting your concern in Microsoft community and welcome to the windows 10 Family.

From the description provided, I understand that the sign in option is not working after you disabled the option for PIN input for password.

At this point, I would suggest you to deploy the
System Restore option in Windows.

This option takes your PC back to an earlier point in time, called a system restore point. Restore points are generated when you install a new app, driver, or Windows update, and when you

create a restore point manually. Restoring won’t affect your personal files, but it will remove apps, drivers, and updates installed after the restore point was made.

• 
  Right-click (or press and hold) the Start button, and then select Control Panel.
  
• 
  Search Control Panel for Recovery.
  
• 
  Select Recovery > Open System Restore > Next.
  
• 
  Choose the restore point related to the problematic app, driver, or update, and then select
  Next > Finish.
  

In order to disable the PIN sign in option in Windows 10, refer to the below steps.

Step 1: Access PC settings and open
Users and accounts.

Step 2: Select Sign-in options and tap the
Remove button under PIN.

Note: you can navigate to the same path in order to re-enable the PIN.

Hope the above information is helpful. If you need further assistance, we would be happy to help you.

Thank you.

 

Disable Sign In PIN

Hi I'm Peter an independent advisor, if you want to disable Windows 10 PIN sign in option, you can do it in this way.

Step 1: Press Windows and R key on the keyboard and enter gpedit.msc on Run open box. Then, press Enter or click the OK button to access Local Group Policy Editor.

run gpedit.msc

Step 2: In this interface, access Computer Configuration > Administrative Templates > Systems > Logon > Turn on PIN sign-in.

turn on PIN sign in option

Step 3: Double click Turn on PIN sign-in, and set this option to Disabled. Then click OK and Apply button. After that, the PIN sign in option is disabled.

 

Windows 10 Domain Joined - How to disable pin sign on.


Having trouble disabling pin sign on for our domain joined machines.

it just doesn't seem to work, I have tried using the registry tweak and GPO policy.

Can someone help please?*Confused*Confused

Firaz

 

Disabling User Passwords Disables PIN and Hello?

Hello Eric,

Thank you for writing to us again.

Please be informed that in Windows PCs, in order to disable-enable the PIN sign in option, you have to access the User Account settings.

If you have any suggestions about Windows 10, I suggest you to post your valuable feedback about Windows 10 in feedback app. So, that it will be helpful for the developers to integrate the changes suggested by you.

Open start menu, type Feedback app in search bar and click on feedback app to open it. Post your suggestions in feedback app.

Hope it helps.

Thank you.