fbpx

How to Disable Pin Requirements When Joining Windows 10 PC to Azure AD and Using Office365 Business Premium

Office365 Business Premium is great subscription for smaller businesses but if you want to join your Windows 10 PC’s to Azure AD it has one big disadvantage over the Enterprise subscriptions, mainly access to InTune.

Because of this if you join a Windows 10 PC to Azure AD all users will be required to setup a Pin before being able to log in. If your users hot desk they will have to do it on every PC they login to!

Your options are to purchase an InTune subscription and apply a license to every user at a cost of £4.50 per user per month.

Your second option is to disable the pin requirement in the registry on each PC either manually or by using your faviourite RMM tool.

I’ve put together a Poweshell script which will disable the pin requirement and also remove any existing pins. Simply run the script as an administrator on each PC or deploy it via RMM.

Disable AzureAD Pin (4176 downloads)
####################################################################################
#
# Ian Waters
#
# www.slashadmin.co.uk
#
# Prevents Windows 10 prompting to setup a pin after being added to Azure AD
#
# Designed for use with Office 365 Business Premium subscriptions
#
####################################################################################

#Disable pin requirement
$path = "HKLM:\SOFTWARE\Policies\Microsoft"
$key = "PassportForWork"
$name = "Enabled"
$value = "0"

New-Item -Path $path -Name $key –Force

New-ItemProperty -Path $path\$key -Name $name -Value $value -PropertyType DWORD -Force

#Delete existing pins
$passportFolder = "C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc"

if(Test-Path -Path $passportFolder)
{
Takeown /f $passportFolder /r /d "Y"
ICACLS $passportFolder /reset /T /C /L /Q

Remove-Item –path $passportFolder –recurse -force
}

Conclusion

Working to a budget by using an Office 365 business premium subscription means you have to work a little harder to set things up just how you want them but once again PowerShell comes to the rescue 🙂

Author: Ian@SlashAdmin

Share This Post On
468 ad

11 Comments

  1. You are a life saver my friend!!!

    worked like a charm.

    Post a Reply
  2. Nice, finally a solution for this annoying problem!
    Thanks a lot!

    Post a Reply
  3. LIFE SAVER !!! i have been looking for a way to fix this M$ money grab for ages.

    Post a Reply
  4. This script works like a charm. Just what I was looking for.

    Post a Reply
  5. Thanks, helped me a lot. But, for one specific person, i would like to revert this script somehow. is this possible?

    Post a Reply
  6. This was a lifesaver… because one user was driving me nuts about having to use the pin and I was going to kill him!

    Thank you! Thank you! Thank you!

    Post a Reply
  7. You freaking rock! I’ve been at it for an hour before I found this!

    Post a Reply
  8. Finally, a solution that works!
    Thank you!

    Post a Reply
  9. We’re a school, just getting to grips with Autopilot and this was a massive headache. Thank you so much for your script!

    Post a Reply
  10. Fantastic! worked like a charm. Thank you!!!

    Post a Reply

Submit a Comment

Your email address will not be published. Required fields are marked *