What is Windows Hello?

Windows 10 has a new feature called Windows Hello. If enabled, it allows users to configure PIN on each of their workstations that can be used to sign into Windows instead of the password, although signing in with a password is still possible on that same workstation. In addition to a PIN, users can also use other methods to sign into Windows, such as a fingerprint scan on laptops equipped with a fingerprint reader.

Currently, Windows Hello is disabled on all computers that are joined to Azure AD and are managed with Intune, with the exception of a few designated devices that are participating in a pilot deployment of Windows Hello. If you would like to have your device added to the pilot, please submit your request by opening a ticket.

PIN

Once your device was added to the pilot, you will be asked to set up a numeric PIN on it. 

  • Has to be at least 6 digit long and no more that 12 digit long.
  • Cannot contain any letters or other characters. Only digts are allowed.
  • Will work only on that device. If you have other devices using Windows Hello, you will also be asked to set up PIN on them which does not have to be the same as the PIN on this device.
  • Changing your PIN on one device does not affect your PIN on other devices because PINs are stored inside a TMP chip on each device and do not synchronise with each other.

Known Issues

There are some limitations and known issues associated with the current implementation of Windows Hello that the pilot users should be aware of.

On-prem Resources

Once you sign into Windows using your PIN, you will not automatically gain access to on-prem Active Directory file shares or print queues. If you are frequently using these resources, you should use your password to sign into Windows instead of using PIN, or you can apply the workaround.

Sign-in Options

Once you set up your PIN, your Windows login page will always default to PIN sign in option although signing in with a password is still possible. In order to sign in with a password, you will first need to click on the Sign-in Options link and then click on the icon with a key on it.

NOTE: Do not click the curly arrow icon as this will cause your Windows to be reset to factory settings.

 

Set Up PIN Button Greyed Out

The option to configure PIN may not be available on some computers that were upgraded from an older version of Windows 10. This is due to the fact that in older versions of Windows 10 Windows Hello feature was disabled by default.

When you go to Windows Settings and click on Accounts then Sign-in Option, you may see that a button to add a PIN under Windows Hello PIN may be grayed out and a message "This setting is managed by your organization. Contact your admin for more info" is displayed. 

Details

Article ID: 82694
Created
Mon 7/8/19 4:32 PM
Modified
Wed 11/6/19 9:38 PM