Windows Hello for Business Roll Back

Question

Hi, We are trying to implement Windows Hello For Business to our company. I created a GPO for this but accidentally I applied to all domain with Authenticated users instead of test OU. Now all computers keeps asking to create a PIN to logon. Unfortunately my implementation is not finished yet.
Is there a way to roll backup this setting to stop computers asking to create a PIN to log on?

Answer 1

Hi,
Since system ask for PIN creation after you applied a Windows Hello for Business GPO for all users, just Not Configured previous GPO and applied to all users is ok. It will no longer prompt for creating PIN.
You know, roll back previous operation is enough, we don’t need to configure specific settings to stop computers asking to create a PIN to log on.
Of course, you could use the following GPO methods to stop PIN prompt:
Method 1:

1. Navigate to Computer Configuration / Administrative Templates / Windows Components / Windows Hello for Business
2. Set the Use Windows Hello for Business policy to Disabled, and click "Apply"
   Method 2:
3. Navigate to Computer Configuration -> Administrative Templates -> System -> Logon
4. Set the Turn on convenience PIN sign-in policy to Disabled, Apply.

-------------------------------------------------------------------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.
Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Thank you for your reply.