Windows 10: How to disable and remove a PIN via Powershell

Hi All


Not a question but an Answer, took me a while to figure out how I could remove and disable a Windows Hello for Business PIN via powershell.


It's pretty simple actually, You can disable the PIN with the below two commands.


Set-ItemProperty HKLM:\SOFTWARE\Policies\Microsoft\Windows\System -Name "AllowDomainPINLogon" -Value 0
Set-ItemProperty HKLM:\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions -Name "value" -Value 0

This sets the Registry values to disabled for the local machine.


I then used the below command I found on a forum to take owner and remove the content inside the folder C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC


If you're skeptical of the script I know I was, take a backup of the folder above and remove the contents manually.


Start-Process cmd -ArgumentList '/s,/c,takeown /f C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /r /d y & icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /grant administrators:F /t & RD /S /Q C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc & MD C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc & icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /T /Q /C /RESET' -Verb runAs

:)

 

Remove sign in pin

Hi Joel,

Thank you for contacting Microsoft Community. Your interest in Windows 10 is much appreciated.

I suggest you to follow the below steps to remove the sign in pin/password options.

• In the search box type sign-in-option.
• Click on the sign-in-option.
• Then you can find password/pin/picture password.
• There you can remove the option and check.

Hope this information was helpful and do let us know if you need further assistance. We will be glad to assist.

 

Disable Sign In PIN

Hello,

You can also disable PIN using registry. Try these steps:

1. Open Registry Editor.
2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System.
3. Set AllowDomainPINLogon to 0.
4. Close Registry Editor and reboot your system.

Hope this helps!

 

USB removable storage disable by powershell script

Hello All,

I want to disable the usb removable storage of the network computers (domain and non-domain) from my computer. But i need powershell script which will disable the usb removable storage of mentioned computer list but through the local group policy not thorough
regedit of that computer also not through the GPO which is in server OS.

Please help me. Thank You.