HexCon is coming to NYC. Catch the early-bird price before the time's up! Book me a spot

Disable and remove a PIN via PowershellSolved

Participant
Discussion
1 year ago

Hello peeps, I was wondering if anyone knows how to disable and remove a “Windows Hello for Business” PIN via any command or script?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
1 year ago
Marked SolutionPending Review

Hi @deborah,

You can disable and remove the PIN using PowerShell. Here are the steps:

Open PowerShell and execute the following commands:

This creates/modifies a Registry value for the local machine.

  • The first PowerShell command disables the use of a domain PIN for login.
  • The second PowerShell command disables the ability to choose sign-in options (such as Windows Hello or fingerprint) on the login screen.

Also, the NGC folder contains encrypted data files that store the biometric data and other credentials required for Windows Hello to authenticate the user.
So, the content of the file should be deletedin order toclear the any previous associated logs.

The given script is used to take ownership and grant full control permissions to the “Administrators” group for the C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC and C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc folders, and then delete the NGC folder and recreate it as an empty folder.

Hope this helps!

Regards,
Carl Hughes
Hexnode UEM