How to Enable or Disable Domain Users to Sign in with PIN to Windows 10
Windows Hello in Windows 10 enables users to sign in to their device using a PIN (Personal Identification Number). You can use this PIN to sign in to Windows, apps, and services.
One important difference between a password and a Hello PIN is that the PIN is tied to the specific device on which it was set up. That PIN is useless to anyone without that specific hardware. Someone who steals your password can sign in to your account from anywhere, but if they steal your PIN, they'd have to steal your physical device too!
Even you can't use that PIN anywhere except on that specific device. If you want to sign in on multiple devices, you have to set up Hello on each device.
For more details, see:
- Why a PIN is better than a password (Windows 10)
- Changes to Convenience PIN / Windows Hello Behavior in Windows 10 Version 1607
By default, PCs joined to a domain cannot sign in using a PIN unless enabled via policy.
This tutorial will show you how to enable or disable allowing domain users to set up and sign in to Windows 10 using a PIN.
You must be signed in as an administrator to enable or disable PIN for domain users.
Contents
- Option One: To Enable or Disable Domain Users Sign-in using PIN in Group Policy
- Option Two: To Enable or Disable Domain Users Sign-in using PIN using a REG file
Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.
All editions can use Option TWO below.
1 Open the Local Group Policy Editor.
2 In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)
Computer Configuration\Administrative Templates\System\Logon
3 In the right pane of Logon in Local Group Policy Editor, double click/tap on the Turn on convenience PIN sign-in policy to edit it. (see screenshot above)
4 Do step 5 (enable) or step 6 (disable) below for what you would like to do.
A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)
A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)
Not Configured is the default setting.
7 When finished, you can close the Local Group Policy Editor, and restart the computer to apply.
The downloadable .reg files below will add and modify the DWORD value in the registry key below.
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
AllowDomainPINLogon DWORD
0 or (delete) = Disable
1 = Enable
1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Enable_Domain_users_PIN_Sign-in.reg
Download
This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Disable_Domain_users_PIN_Sign-in.reg
Download
4 Save the .reg file to your desktop.
5 Double click/tap on the downloaded .reg file to merge it.
6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
7 Restart the computer to apply.
8 If you like, you can now delete the downloaded .reg file.
That's it,
Shawn
Related Tutorials
- How to Join a Windows 10 PC to a Local Active Directory Domain
- How to Enable or Disable Domain Users to Sign in to Windows 10 using Biometrics
- How to Enable or Disable Domain Users to Sign in with Picture Password to Windows 10
- How to Add a PIN to your Account in Windows 10
- How to Change the PIN for your Account in Windows 10
- How to Remove PIN from your Account in Windows 10
- How to Reset the PIN for your Account in Windows 10
- How to Fix Unable to Add and Use PIN Sign-in Option in Windows 10
- How to Enable or Disable PIN Reset at Sign-in in Windows 10
- How to Enable or Disable Require Digits for PIN in Windows 10
- How to Enable or Disable Require Lowercase Letters for PIN in Windows 10
- How to Enable or Disable Require Uppercase Letters for PIN in Windows 10
- How to Enable or Disable Require Special Characters for PIN in Windows 10
- How to Specify a Maximum and Minimum PIN Length in Windows 10
- How to Enable or Disable PIN Expiration in Windows 10
- How to Enable or Disable PIN History in Windows 10
- How to Enable or Disable Show Local Users on Sign-in Screen on Domain Joined Windows 10 PC