Windows 10: Random PCs configuered with Yubikey have stopped sign in and ends with error"You can't sign...

Hi!We have applied Yubikey login to all our generic account PC in the organisation with PIN & touch login. after 3-4 months, some random PCs are unable to sign in and comes up with error "You can't sign in with this account, please try a different account" . Other PC configured with same account and Yubikey have no issue. this has happened to 2-3 random PCs recently. I would like to know the fix before we started getting issues with other PCs.The only work around now is we have to remove the security key using other PC's working key as 2fa and readd/resetup it.

:)

 

How to troubleshoot an error that appears only at Restart or Sign out?

I get an error pop-up error message not every, but almost every time I Restart or Sign out. It's the screen with blue background and on top of Restart or Sign out text an error window says:

Explorer.exe - Application error. The instruction at 0x000… referenced memory at 0x000... The memory could not be written.

Sometimes the error code is just zeros, sometimes random numbers. I have tried so much already to troubleshoot this. For example these did not help in any way:

• MemTest86+ (no problems)
• Disabling any Services, Autoruns/ShellExView entries
• Low resolution mode
• BIOS settings are fine, no overclocking etc.
• DISM.exe and sfc
• etc.

However, these do make the error go away:

• End process for explorer.exe before Restart or Sign out
• Safe Mode
• Creating a new user profile (almost the same as clean installing Windows, many full days of work)
• Uninstalling NVIDIA graphics driver (then the card is unusable, of course)
• Disabling Device Manager / Display Adapters / NVIDIA GeForce GTX 1080

I already contacted NVIDIA and the graphics driver is not the culprit. Something has gone wrong with the user profile as the same driver works just fine in a new profile (and there's nothing wrong with the driver anyway, it's just the Restart or Sign out process that has a problem).

What can I do to fix this? One useful thing would be to have a step-by-step procedure for the Sign out. So that it'd ask before continuing to the next step and list what it's doing. Or if I could just disable whatever it does when the error appears.

 

Is it possible to disable password sign in, but enable Windows Hello or pin to sign in to a PC

Because face recognition, fingerprint or Yubikey are more secure, I want to disable password sign in on my computer. I tried netplwiz and unchecking 'user must enter a user name and password to
use this computer', but then the PC starts without any sign in option, so no security at all.

Is it possible to disable password sign in, but sign in with Windows Hello (face recognition, fingerprint and/or Yubikey)?

 

Yubikey Two-Factor Authentication

Hi....I just purchased a " Yubikey " to use with the password manager
LastPass and it works very well as a two-factor authentication. I sign on to my PC with my Microsoft account and would like to use the Yubikey as a two-factor there also. I can't seem to find a procedure at Microsoft that explains
how to set this up correctly. The last thing I want to do is lock myself out of my PC.

I need to know ;

(1) The procedure to setup a Yubikey with a Microsoft account.

(2) Will the Yubikey work OK on any PC that I may sign onto with my Microsoft account. I have several PC's i often sign into .

Any help will be appreciated.

Thanks.....Larry