Problem With WIndows Hello Pin/Facial Recognition when registering it with Microsoft Account.

Question

I have an issue on my domain machines when they register Windows Hello or Pin and complete the registration with a Microsoft Account. The pin and any Biometric authentication disappear after a reboot and sign on using the pin or Biometric for the first time. The machine goes back to a state as if the Biometrics were never configured, You then have to re-register the PIN/Biometrics. If you skip registering with a Microsoft Account, the

PIN /Biometrics keep working without a problem.

Thanks,

Anton Badenhorst

***moved from Windows / Windows 11 / Security and privacy***

Answer 1

Hello Anton,

Based on the information you have provided, it seems that the issue might be related to the synchronization of the Windows Hello credentials with the Microsoft Account. To resolve this issue, you can try the following steps:

1. Check if the Windows Hello credentials are synchronized with the Microsoft Account. To do this, go to Settings > Accounts > Your Info and check if the "Sync your settings" option is turned on.
2. If the synchronization is turned on, try turning it off and then turning it back on again.
3. If the issue persists, you can try resetting the Windows Hello credentials. To do this, go to Settings > Accounts > Sign-in options and click on "Windows Hello PIN" or "Windows Hello Face" and then click on "Remove".
4. After removing the Windows Hello credentials, restart your computer and then re-register the Windows Hello credentials.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hi Yanhong Liu,

Thank you for the response unfortunately I have tried all of that and the issue is happening across multiple machines in the domain.

I am still at a loss as to why this happening it makes no sense. It seems that something from the Microsoft Account (365) is resetting the Biometric settings on the machine, but I have been unable to find any setting in 365 that would even do such a thing.

A caveat to the situation is that private Microsoft Accounts do not cause the same issue which would indicate that some setting in 365 is causing it,

Thanks,

Anton Badenhorst

Answer 3

I have found the solution to my problem.

The solution is creating a profile under Account Protection in Endpoint security in Intune.

There you can enable biometric and pin authentication including the length/complexity parameters.

Assign it to a group and all the machines that use PIN/biometric authentication to it!

Thanks,

Anton Badenhorst

Answer 4

Hello Anton,

Good day!

Thank you for your reply and update.

I am so glad that the problem has been resolved.

Have a nice day!

Best Regards,

Yanhong Liu

Answer 5

It seems I have not found the solution.

It slows it down, so it takes a couple of days before it gets wiped but PIN/Biometric settings till get wiped.