Disable and remove a PIN via Powershell

expand collapsive

Hello peeps, I was wondering if anyone knows how to disable and remove a “Windows Hello for Business” PIN via any command or script?

All Replies

  • Hi @deborah,

    You can disable and remove the PIN using PowerShell. Here are the steps:

    Open PowerShell and execute the following commands:

    This creates/modifies a Registry value for the local machine.

    • The first PowerShell command disables the use of a domain PIN for login.
    • The second PowerShell command disables the ability to choose sign-in options (such as Windows Hello or fingerprint) on the login screen.

    Also, the NGC folder contains encrypted data files that store the biometric data and other credentials required for Windows Hello to authenticate the user.
    So, the content of the file should be deletedin order toclear the any previous associated logs.

    The given script is used to take ownership and grant full control permissions to the “Administrators” group for the C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC and C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc folders, and then delete the NGC folder and recreate it as an empty folder.

    Hope this helps!

    Carl Hughes
    Hexnode UEM