fbpx

How to Disable Pin Requirements When Joining Windows 10 PC to Azure AD and Using Office365 Business Premium

Office365 Business Premium is great subscription for smaller businesses but if you want to join your Windows 10 PC’s to Azure AD it has one big disadvantage over the Enterprise subscriptions, mainly access to InTune.

Because of this if you join a Windows 10 PC to Azure AD all users will be required to setup a Pin before being able to log in. If your users hot desk they will have to do it on every PC they login to!

Your options are to purchase an InTune subscription and apply a license to every user at a cost of £4.50 per user per month.

Your second option is to disable the pin requirement in the registry on each PC either manually or by using your faviourite RMM tool.

I’ve put together a Poweshell script which will disable the pin requirement and also remove any existing pins. Simply run the script as an administrator on each PC or deploy it via RMM.

Disable AzureAD Pin (6583 downloads)
####################################################################################
#
# Ian Waters
#
# www.slashadmin.co.uk
#
# Prevents Windows 10 prompting to setup a pin after being added to Azure AD
#
# Designed for use with Office 365 Business Premium subscriptions
#
####################################################################################

#Disable pin requirement
$path = "HKLM:\SOFTWARE\Policies\Microsoft"
$key = "PassportForWork"
$name = "Enabled"
$value = "0"

New-Item -Path $path -Name $key –Force

New-ItemProperty -Path $path\$key -Name $name -Value $value -PropertyType DWORD -Force

#Delete existing pins
$passportFolder = "C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc"

if(Test-Path -Path $passportFolder)
{
Takeown /f $passportFolder /r /d "Y"
ICACLS $passportFolder /reset /T /C /L /Q

Remove-Item –path $passportFolder –recurse -force
}

Conclusion

Working to a budget by using an Office 365 business premium subscription means you have to work a little harder to set things up just how you want them but once again PowerShell comes to the rescue 🙂

Author: Ian@SlashAdmin

Share This Post On
468 ad

18 Comments

  1. You are a life saver my friend!!!

    worked like a charm.

    Post a Reply
  2. Nice, finally a solution for this annoying problem!
    Thanks a lot!

    Post a Reply
  3. LIFE SAVER !!! i have been looking for a way to fix this M$ money grab for ages.

    Post a Reply
  4. This script works like a charm. Just what I was looking for.

    Post a Reply
  5. Thanks, helped me a lot. But, for one specific person, i would like to revert this script somehow. is this possible?

    Post a Reply
  6. This was a lifesaver… because one user was driving me nuts about having to use the pin and I was going to kill him!

    Thank you! Thank you! Thank you!

    Post a Reply
  7. You freaking rock! I’ve been at it for an hour before I found this!

    Post a Reply
  8. Finally, a solution that works!
    Thank you!

    Post a Reply
  9. We’re a school, just getting to grips with Autopilot and this was a massive headache. Thank you so much for your script!

    Post a Reply
  10. Fantastic! worked like a charm. Thank you!!!

    Post a Reply
  11. AWSOME! Thank you so much! I sat here for hours with the “spinning wheel of deal” searching for a solution to this problem that no one seemed to understand.

    Post a Reply
  12. Amazing – thanks so much.

    Post a Reply
  13. Had to stop and give you kudos for this. Worked like a charm with O365 A1 for Faculty licensing.

    Post a Reply
  14. Did not work on my end unfortunately. Still required to enter pin when loging in with Azure AD joined user on Win10

    Post a Reply
  15. Sorry, i was a bit to fast. Works like a charm, i am just an idiot 🙂

    Post a Reply
  16. OMG! Lifesaver! Thank you.

    Post a Reply

Submit a Comment

Your email address will not be published. Required fields are marked *