Windows 10: How to Disable Windows Hello on lost PC?

Hello.
I am using Korean Windows 10 Home version 2004.

When I set the Windows Hello PIN in the Windows login options, I can log in to Microsoft's web services such as OneDrive with the Windows Hello PIN.


When I try to remove Windows Hello from my login method by accessing the Microsoft account site, it does not appear on the listfigure1.




Eventually I managed to make Windows Hello appear in the list, by means of removing and resetting the PIN in Windows settings, and manually adding Hello on the MS account sitefigure2.







However, even if I removed Windows Hello from here, I could still access MS sites through Windows Hello.

Changing the password for my MS account and logging out from a trusted device couldn't block Windows Hello.

I think this is a big problem for security.
This is because if the PC on which Windows Hello is set up is lost or stolen, there is no way to prevent it from accessing your MS account. Whether it's your fingerprint or PIN, we can't guarantee that it's 100% unbreakable.

I have confirmed that this problem occurs with the Microsoft account included in "Accounts used by other apps" in Windows Settingsfigure3.






In case of emergency, there must be a way to remotely block access to MS accounts through Windows Hello.


I contacted the MSRC first case 62286.
They told me it is not a security issue but just a support issue.
So I'm asking you.
Does this only happen to me? Or is there a solution?

Thanks.

:)

 

PIN Box Missing - After Update - Windows Hello

Thank you for all the information.

To assist you better with your concern, we suggest that you disable Windows Hello. This should prevent you from getting issues in logging-in to your computer.

To do it, kindly follow the steps below:

• On your Cortana, type "Settings", and then press Enter.
  
• Select Accounts.
• Choose Sign-in options.
• Disable Windows Hello.

Let us know how it goes.

 

Disabling User Passwords Disables PIN and Hello?

Hello Eric,

Thank you for posting your concern in Microsoft community and welcome to the windows 10 Family.

From the description provided, I understand that the sign in option is not working after you disabled the option for PIN input for password.

At this point, I would suggest you to deploy the
System Restore option in Windows.

This option takes your PC back to an earlier point in time, called a system restore point. Restore points are generated when you install a new app, driver, or Windows update, and when you

create a restore point manually. Restoring won’t affect your personal files, but it will remove apps, drivers, and updates installed after the restore point was made.

• 
  Right-click (or press and hold) the Start button, and then select Control Panel.
  
• 
  Search Control Panel for Recovery.
  
• 
  Select Recovery > Open System Restore > Next.
  
• 
  Choose the restore point related to the problematic app, driver, or update, and then select
  Next > Finish.
  

In order to disable the PIN sign in option in Windows 10, refer to the below steps.

Step 1: Access PC settings and open
Users and accounts.

Step 2: Select Sign-in options and tap the
Remove button under PIN.

Note: you can navigate to the same path in order to re-enable the PIN.

Hope the above information is helpful. If you need further assistance, we would be happy to help you.

Thank you.

 

How to disable Windows Hello

Hi Tom,



Thank you for writing to Microsoft Community Forums.



I understand how frustrating it could be when things do not work the way they are expected to. However, we can try a few steps and see if we can disable Windows Hello permanently, but before we try those steps, may I know:



What is the version of Windows 10 installed on the computer?

Did you notice any changes on the computer prior to this issue?



Troubleshooting methods:



Method 1: Using Group policy settings.

If you are on Windows 10 Pro edition, you can change the group policy settings to disable PIN sign-in option for all users.

• Open the Run dialog box by pressing the Windows key and the R key together.
  
• Type GPEDIT.MSC and hit the Enter key.
  
• Go to Computer Configuration -> Administrative Templates -> System -> Logon.
  
• On the right side, double click on Turn on PIN sign-in and select
  Disabled.
  
• Similarly disable the other Windows Hello options if any.
  
• Exit the Group policy editor and reboot the computer.
  
  
  
  Method 2: Disabling Windows Hello in Registry.
  
  If setting Group policy doesn’t work, you disable the sign in options which should disable
  
  Windows Hello options in all user accounts.
  
  
  

Disclaimer: The registry is a database in Windows that contains important information about system hardware, installed programs and settings, and profiles of each of the user accounts
on the computer. Windows often reads and updates the information in the registry.

Normally, software programs make registry changes automatically. You should not make unnecessary changes to the registry. Changing registry files incorrectly can cause Windows to stop working or make Windows report the wrong information.



Please take a backup of the registry. Follow the steps given in the link below:

How to back up and restore the registry in Windows

• Open the Run dialog box by pressing the Windows key and the R key together.
  
• Type Regedit and hit the Enter key.
  
• When the Registry Editor opens, navigate to the following location:
  
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions.
  
• In the right pane, double click on the DWORD entry named
  value set it to 0.
  
  
  
  The above method will disable Windows Hello for all user accounts. If you want to re-enable
  
  it, change the DWORD entry Value back to
  1.
  
  
  
  Hope it helps.
  
  
  
  Thanks,
  
  Peer Samie
  
  Microsoft Community-Moderator