Windows Hello Sign In options PIN Missing

Question

I'm using all Windows 10 systems with version 2004 with all updates in a simple domain. The server is Windows Server 2012 R2 with all updates. I'm trying to deploy Windows Hello with the PIN option via the GPO.I have enabled "Turn on convenience PIN sign-in". This GPO is for only two systems and enforced.

This is also turned in Edit Group policy:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
AllowDomainPINLogon 1

An administrator system I only have two options in the Sign-in options screen. The Security Key and Password. I do have other GPOs for this system. Could there be an effect from those and what could it be? How do I get the PIN option to show.

Answer 1

@Jackie Butler
Hi,

Try setting this registry key and reboot:
[ HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ System ] “ AllowDomainPINLogon” = dword ：00000001

Also, "use Windows Hello for Business" has to be set to "not configured".

From my research, a user cannot create a convenience PIN in Windows 10 Version 1607 and later version when the Use Convenience PIN and Use Windows Hello for Business policies are both enabled unless the device is joined to Azure Active Directory in some way.

Do not configure settings other than PIN complexity if you want to use a convenience PIN. Having Windows Hello for Business and Turn on convenience PIN sign-in enabled prevents you from setting a PIN.

For you reference:
https://learn.microsoft.com/en-us/troubleshoot/windows-client/user-profiles-and-logon/cannot-configure-a-convenience-pin

Hope above information can help you.

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.