enable windows hello PIN when grayed out

Question

enable windows hello PIN when grayed out

Angie Cowey 0

I want to enable (remove) Hello PIN sign-in feature. There is a button that says "remove this sign-in option" but it's grayed out.

0 comments

4 answers

Your answer

Answer 1

Angie Cowey 0

ok, I will try this later. thanks for your help

EmilyS726 271.2K Reputation points Independent Advisor

2026-10-07T15:11:36.65+00:00

You are welcome.

Also, this is a community forum, not a live chat. So it is normal response is not live and instant.

Answer 2

Angie Cowey 0

I didn't get a response back

0 comments

Answer 3

Angie Cowey 0

I just told you I did this & it was already marked as such. (First, go to Settings > Accounts > Sign in options, scroll down to mid page, Do you see "For improved security, only allow Windows Hello Sign-in for Microsoft accounts on this device (Recommended). " If so, make sure it is turned off before you can remove PIN.)

What happens if I delete this work account? I'm afraid to delete it & mess up something else way more important. If that still doesn't work, Can you go to your Windows Settings > Accounts > Access Work or School (note, it is the briefcase icon, not the envelope or little person icon). Then see if the organization email address is still listed? If so, click on it and then disconnect it. Restart the computer and see if you can remove PIN.

EmilyS726 271.2K Reputation points Independent Advisor

2026-10-07T15:06:50.2466667+00:00

To be fair, you didn't mention anything about the toggle "For improved security, only allow Windows Hello Sign-in for Microsoft accounts on this device (Recommended)." in your original post. You mentioned the PIN removal button is grayed out, which is not the same as the toggle I referenced.

Disconnecting organization account is safe, especially if this is your personal account. When you sign into apps like Teams, Office apps with your organization account, you typically get a pop up asking if you allow organization to access/manage settings, you probably didn't pay close attention and just clicked Yes. That would enroll your device into the organization's Intune device management, meaning, your organization admin can roll out security policy to make sure your device's security is meeting the organization's standard. They don't access your data, but they can enforce PIN policy, and make sure you update your Windows on time, etc. So if you disconnect that organization account, these group policies cannot be pushed upon your device anymore. That's all that will be changed.

Answer 4

Hello,

First, go to Settings > Accounts > Sign in options, scroll down to mid page, Do you see "For improved security, only allow Windows Hello Sign-in for Microsoft accounts on this device (Recommended). " If so, make sure it is turned off before you can remove PIN.

If that still doesn't work, Can you go to your Windows Settings > Accounts > Access Work or School (note, it is the briefcase icon, not the envelope or little person icon). Then see if the organization email address is still listed? If so, click on it and then disconnect it. Restart the computer and see if you can remove PIN.

If for any reason this still doesn't work or you cannot find the organization account, or the option to turn off requirement of Windows Hello, type "regedit" in the search on the taskbar to launch Registry Editor, then go to this folder on the left pane (use the little arrow on each folder to expand), and share a screenshot so I can review.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device