How to enable password login in addition to PIN in an EntraJoin AutoPilot environment

Question

After updating the BIOS on my PC, my PIN is no longer valid and I cannot log in to my PC.

I tried to “turn off Windows Hallo sign-in only permission”, but cannot find the setting on the PC in question.

PC is AutoPilot with EntraJoin.

Is it possible to create the same thing (a policy to allow non-PIN logins) in Intune?

Reference.

You need to turn off “Allow Windows Hallo sign-in only” and set it to allow sign-in with your Microsoft account password in advance.

https://answers.microsoft.com/ja-jp/windows/forum/all/pc%E3%81%AEbios%E3%82%92%E3%82%A2%E3%83%83/7d54c182-3fce-4797-8764-2b70cacff 396

Best regards.

Translated with DeepL.com (free version)

Answer 1

@ChikaraTaro, Thanks for posting in Q&A.

From your description, I know you want to create a policy to allow non-PIN logins on Autopilot device via Intune.

Based on my research, once you enable Windows hello for Business, it will let you configure PIN to login in, however, you can also use other methods to login in, for example, Microsoft Entra ID account password.

If you want to disable PIN login, you can try the method mentioned in the link below to disable Windows Hello for Business and try to use Microsoft Entra ID account to login in.

https://www.prajwaldesai.com/disable-windows-hello-for-business-using-intune/#:~:text=Perform%20the%20following%20steps%20to%20disable%20Windows%20Hello,the%20General%20section%2C%20select%20Windows%20Hello%20for%20Business.

Non-official, just for reference.

Hope above information can help you.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

You should be able to sing-in to the computer with yout Entra ID credentials, just select password instead of PIN. Few years ago I tried to disable Windows Hello from Windows once it was enabled by policy and then it was impossible to do so.