Windows 10: How to Disable just Windows Hello PIN

In my organisation Windows Hello is disabled, but we recently integrate OKTA in our business and installed OKTA verify app on devices for authentications. Now OKTA app allows users to set Windows Hello Face/Fingerprint and Windows Hello PIN. By default Windows Hello PIN doesn't comes with complex password and we feel it's a security concern. Wondering, how can i just disable Windows Hello PIN leaving Face/Fingerprint for login? Also Hello PIN remove option is greyed out, Anyone knows how to setup this in either Regedit or local group policy?

:)

 

Login with PIN and Hello

Hi Jean,

Windows 10 includes multiple options to sign-in to your account, including the ability to sign-in using a PIN and Windows Hello, which uses facial recognition. For us to provide a solution suited to your concern, we need additional information. Can
you answer the questions below?

• How are you setting the PIN and Hello?
• Which build version of Windows is your PC running on?
• Were there any error codes or messages?

In the meantime, we suggest that you follow the steps below on how to set up PIN.

• Open Settings.
• Select Accounts.
• Click Sign-in options.
• Click the Add button for the PIN and set your PIN.
• Do the same for the Windows Hello.

Looking forward to your response.

 

Disabling User Passwords Disables PIN and Hello?

Hello Eric,

Thank you for posting your concern in Microsoft community and welcome to the windows 10 Family.

From the description provided, I understand that the sign in option is not working after you disabled the option for PIN input for password.

At this point, I would suggest you to deploy the
System Restore option in Windows.

This option takes your PC back to an earlier point in time, called a system restore point. Restore points are generated when you install a new app, driver, or Windows update, and when you

create a restore point manually. Restoring won’t affect your personal files, but it will remove apps, drivers, and updates installed after the restore point was made.

• 
  Right-click (or press and hold) the Start button, and then select Control Panel.
  
• 
  Search Control Panel for Recovery.
  
• 
  Select Recovery > Open System Restore > Next.
  
• 
  Choose the restore point related to the problematic app, driver, or update, and then select
  Next > Finish.
  

In order to disable the PIN sign in option in Windows 10, refer to the below steps.

Step 1: Access PC settings and open
Users and accounts.

Step 2: Select Sign-in options and tap the
Remove button under PIN.

Note: you can navigate to the same path in order to re-enable the PIN.

Hope the above information is helpful. If you need further assistance, we would be happy to help you.

Thank you.

 

Disable Sign In PIN

Hello,

You can also disable PIN using registry. Try these steps:

1. Open Registry Editor.
2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System.
3. Set AllowDomainPINLogon to 0.
4. Close Registry Editor and reboot your system.

Hope this helps!