Category filter
Script to disable Sign-in options on Windows
When it comes to securing a Windows computer, one method is to set up a Sign-in option for accessing your account. There may be times when you want to disable the Sign-in options for specific purposes, such as troubleshooting or maintenance. You can use the following scripts to enable or disable the Sign-in options quickly and efficiently on multiple endpoints, without navigating to the settings menu. The Execute Custom Script action lets you execute these customized scripts on different endpoints remotely.
PowerShell script
To disable Windows Sign-in options:
The following PowerShell command disables the ability to choose sign-in options on the login screen.
1 |
Set-ItemProperty HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Settings -Name "AllowSignInOptions" -Value 0 |
On executing this command, the following Sign-in options get disabled:
- Facial recognition (Windows Hello)
- Fingerprint recognition (Windows Hello)
- PIN (Windows Hello)
- Security Key
- Password
- Picture password
To enable Windows Sign-in options:
The following PowerShell command re-enables the sign-in options for the users.
1 |
Set-ItemProperty HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Settings -Name "AllowSignInOptions" -Value 1 |
To disable Windows Hello options:
The PowerShell command specified below disables the ability to choose Windows Hello options for the user.
1 |
Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\PassportForWork -Name "Enabled" -Value 0 |
On executing this command, the following Windows Hello options get disabled:
To enable Windows Hello options:
The following PowerShell command re-enables the ability to choose Windows Hello options for the user.
1 |
Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\PassportForWork -Name "Enabled" -Value 1 |