Share via

How to enable password login in addition to PIN in an EntraJoin AutoPilot environment

ChikaraTaro 80 Reputation points
2024-09-15T06:40:29.6766667+00:00

After updating the BIOS on my PC, my PIN is no longer valid and I cannot log in to my PC.

I tried to “turn off Windows Hallo sign-in only permission”, but cannot find the setting on the PC in question.

PC is AutoPilot with EntraJoin.

Is it possible to create the same thing (a policy to allow non-PIN logins) in Intune?

Reference.

You need to turn off “Allow Windows Hallo sign-in only” and set it to allow sign-in with your Microsoft account password in advance.

https://answers.microsoft.com/ja-jp/windows/forum/all/pc%E3%81%AEbios%E3%82%92%E3%82%A2%E3%83%83/7d54c182-3fce-4797-8764-2b70cacff 396

Best regards.

Translated with DeepL.com (free version)

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,893 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,048 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,652 questions
Accepted answer
  1. ZhoumingDuan-MSFT 13,085 Reputation points Microsoft Vendor
    2024-09-16T01:32:03.64+00:00

    @ChikaraTaro, Thanks for posting in Q&A.

    From your description, I know you want to create a policy to allow non-PIN logins on Autopilot device via Intune.

    Based on my research, once you enable Windows hello for Business, it will let you configure PIN to login in, however, you can also use other methods to login in, for example, Microsoft Entra ID account password.

    If you want to disable PIN login, you can try the method mentioned in the link below to disable Windows Hello for Business and try to use Microsoft Entra ID account to login in.

    https://www.prajwaldesai.com/disable-windows-hello-for-business-using-intune/#:~:text=Perform%20the%20following%20steps%20to%20disable%20Windows%20Hello,the%20General%20section%2C%20select%20Windows%20Hello%20for%20Business.

    Non-official, just for reference.

    Hope above information can help you.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pavel yannara Mirochnitchenko 12,576 Reputation points MVP
    2024-09-15T15:17:14.67+00:00

    You should be able to sing-in to the computer with yout Entra ID credentials, just select password instead of PIN. Few years ago I tried to disable Windows Hello from Windows once it was enabled by policy and then it was impossible to do so.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.