For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device

Question

Hi,

Can anyone tell me what this "For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device" EXACTLY means?

What does it do exactly? I don't understand the difference between turning it of or keeping it on.

I am asking because i want to get rid of the pin sign in at Windows start up. However the remove button is greyed out and as far as I know it will only become usable again if I turn this option off.

Regards,

Martin

Answer 1

The disadvantage of turning off "For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device" is simply that IF someone were to have physical access to the device (i.e able to touch the keyboard) they would not have the, harder to hack, Windows Hello to cope with before getting access to the Files etc.

Removing the need to enter the password on boot, of course, removes any barrier for anyone that has physical access to the device.

The password still protects from outside interference or remote access.

To remove the need to enter the password when starting Windows,

click start

type netplwiz and press enter

untick "users must enter a username and password..."

click apply

(if it is already unticked, tick the box and click apply then untick it again and click apply)

you will be asked for a username and password (used to automatically log on).

if you are using a Microsoft account enter the FULL email address.

enter and verify your password and click ok

next time you boot the computer it will automatically log on.

NOTE - there is no need to switch to a local account, it WORKS perfectly well with a Microsoft account, as long as you enter the full email address in the username field.

blank passwords are NOT a good idea.

do not forget the password.

To prevent it asking for a password when waking from sleep, go to settings -> accounts -> sign-in options

under Additional settings,

next to If you've been away, when should Windows require you to sign in again" select Never.

There are still some occasions when the password will need to be entered, such as accessing the device across a network or viewing saved passwords etc. - do not forget the password.

If you have problems or questions with the above please do not hesitate to let me know

Answer 2

Hi Martin,

If you are using a Microsoft account to log into windows the "For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device" Option forces users to set up and use Windows Hello PIN etc.

If it is turned on you cannot remove the PIN, you can only change it

if it is turned off, it is the users choice to use Windows Hello or not and the remove option will be available.

if you turn the option off and remove the PIN you will need to use your password to log in when you start windows, or are you looking to remove that too?

Answer 3

Hi,

I want to remove the password option as well. I just want to start my PC and have windows running without any need to login first. How would I go about getting rid of the password option then?

What are the disadvantages of turning off "For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device"?

Regards,

Martin

Answer 4

Hi,

This worked!!! I am very happy with the result and your help. Thank you very much for taking the time and helping me out here.

I wish you a great weekend!

Regards,

Martin

Answer 5

You're welcome, I am glad it helped.

I hope, you too, have a good weekend

regards,
Martin M