PIN’s used to work in Windows 10 with no changes to GPO’s but at some point in recent Win 10 ADMX templates, Microsoft added an odd setting. They turned off PIN’s by default and you have to turn them on in via GPO if you want to use them on a domain connected user account.
This means that there is not a GPO that is blocking your use of PINs and the message “THIS SETTING IS MANAGED BY YOUR ORGANIZATION” is very misleading.
The solution to using PIN’s on a domain is quite easy:
This makes WINDOWS HELLO PINS optional, if you want to require a PIN go to USER > Administrative Templates > Windows Component, and select Windows Hello for Business
Also note that if you are a local administrator (i.e. on your corporate PC), you can also make this change in the LOCAL GROUP POLICY EDITOR by clicking START, typing GPEDIT.MSC .
This has been a up my butt for months now. I could not find the GPO that was blocking the use of PIN’s no matter how many GPRESULT -R’s I ran, so I hope this helps your frustration level.
This website uses cookies.
View Comments
It works! Thank you!
Works like a charm, confirmed on several PCs with this issue.
This doesn't work for us either, also using a domain account. Maybe you should mention in your post that this is not a solution for everyone as clearly it is not working for many users. Thanks for posting though.
We have used this solution several times in recent months but it apparent there are other issues that can cause this problem. If you find any alternate solutions, please let us know. Thanks
I agree with Peter. It does not work.
I can assure you this does work in the situations we have run into. If it is not working for you, you are most likely skipping a step OR (more likely) have a different problem with the same symptom.
It doesn't work. The policy has applied correctly as shown in GPresult, still greyed out. But if login as a local user account it works, just not domain account.
I can assure you from experience that this process does work. If it did not solve the issue you are seeing then there is something else you need to look for (but we can't suggest what that would be).