User forgot PIN - no way to reset, can't take ownership of NGC folder

Question

As title suggests one of our users has forgotten their PIN and needs it to enrol a fingerprint via Windows Hello. There is no 'reset PIN' option, presumably since it's a domain joined machine.

This has happened to us many times before and my usual solution is to unlink their Microsoft account under settings->Access Work or School, then re-add it. I tried doing so this time and for some reason it still did not remove the old PIN even after a reboot.

I looked in to this issue and the most common suggested solution is to delete or rename the NGC folder located at:

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc

However, this appears to be impossible even if I log out of the user and log in via the local admin acount. I cannot seem to take ownership no matter what I try.

If I had physical access to the device I would attempt to delete it in safe mode, or just boot into a different OS but as the user is remote I do not have these options. Wondering if there is another solution for the fingerprint problem.

Answer 1

Hello @GPennarun ,

Thank you for posting here.

After my check and test, I can take ownership of NGC folder.

For example:

In my domain client.

1-I logon this PC with domain Administrator.
2-I change ownership for NGC folder.

3-I can add the user or group I want (such as domain administrator).

Please check if you can try the steps above. If so, check if you can relve the original issue in the post.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou