This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 68%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBT%3C/text%3E%3C/svg%3E)
In my organisation Windows Hello is disabled, but we recently integrate OKTA in our business and installed OKTA verify app on devices for authentications. Now OKTA app allows users to set Windows Hello Face/Fingerprint and Windows Hello PIN. By default Windows Hello PIN doesn't comes with complex password and we feel it's a security concern. Wondering, how can i just disable Windows Hello PIN leaving Face/Fingerprint for login? Also Hello PIN remove option is greyed out, Anyone knows how to setup this in either Regedit or local group policy?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi
Good day!
I'm just following up to make sure you received my last reply and that my answers properly address your questions.
If you have any further questions or concerns about this case, please let me know.
Hello @Bala Tuluva
I’ve checked the Windows Hello group policy, it is located under Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business, it seems no option there to disable pin but leave other biometric authentication available.
Best regards
Karlie
