Hello peeps, I was wondering if anyone knows how to disable and remove a “Windows Hello for Business” PIN via any command or script?
Hello peeps, I was wondering if anyone knows how to disable and remove a “Windows Hello for Business” PIN via any command or script?
Hi @deborah,
You can disable and remove the PIN using PowerShell. Here are the steps:
Open PowerShell and execute the following commands:
1 2 |
Set-ItemProperty HKLM:\SOFTWARE\Policies\Microsoft\Windows\System -Name "AllowDomainPINLogon" -Value 0 Set-ItemProperty HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Settings -Name "AllowSignInOptions" -Value 0 |
This creates/modifies a Registry value for the local machine.
Also, the NGC folder contains encrypted data files that store the biometric data and other credentials required for Windows Hello to authenticate the user.
So, the content of the file should be deletedin order toclear the any previous associated logs.
1 2 3 4 5 6 |
Start-Process cmd -ArgumentList '/s,/c,takeown /f C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /r /d y & icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /grant administrators:F /t & RD /S /Q C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc & MD C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc & icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /T /Q /C /RESET' -Verb runAs |
The given script is used to take ownership and grant full control permissions to the “Administrators” group for the C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC and C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc folders, and then delete the NGC folder and recreate it as an empty folder.
Hope this helps!
Regards,
Carl Hughes
Hexnode UEM
Don't have an account? Sign up