Use PIN as the default login method

Question

Hello, after WIndows Hello has been set up, the device is still asking for a password and the user needs to manually select a PIN to log in using the PIN.

Can I force and prioritize a PIN using Intune?

The network has instructions on how to do it for a specific user. By setting a per-user value in the registry, but I can't do it per device. Of course, you can write a script that will determine the SID of the current user, make sure that Windows Hello is configured and change its value. But all this will be performed from the system and this is not a good solution at all.

Thank you.

Answer 1

@Mountain Pond, Thanks for posting in Q&A. Based on my researching, when you sign-in to your user account or unlock the workstation, the last used sign-in method (PIN, Password or Windows Hello) is saved to the registry, and the same will be used the next time. The last sign-in mechanism is stored in the following key, in the value name that matches your user account SID:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserTile

You can let users to sign in with PIN and then see if the PIN will be the default sign in option next time.

If not, you can check if auto login is set, If yes, disable automatic login to see if it works.

Hope it can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.