Policy

Turn on convenience PIN sign-in

This policy setting allows you to control whether a domain user can sign in using a convenience PIN. If you enable this policy setting, a domain user can set up and sign in with a convenience PIN. If you disable or don't configure this policy setting, a domain user can't set up and use a convenience PIN. Note: The user's domain password will be cached in the system vault when using this feature. To configure Windows Hello for Business, use the Administrative Template policies under Windows Hello for Business.

Policy
PackMicrosoft Windows
CategorySystem / Logon
Policy ID97f457ae607b
Internal nameAllowDomainPINLogon

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\System\AllowDomainPINLogon (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\System\AllowDomainPINLogon (disabled) = 0

Policy notes

This policy setting allows you to control whether a domain user can sign in using a convenience PIN. If you enable this policy setting, a domain user can set up and sign in with a convenience PIN. If you disable or don't configure this policy setting, a domain user can't set up and use a convenience PIN. Note: The user's domain password will be cached in the system vault when using this feature. To configure Windows Hello for Business, use the Administrative Template policies under Windows Hello for Business.

Related policies

Allow users to select when a password is required when resuming from connected standbyAlways use classic logonAlways use custom logon backgroundAlways wait for the network at computer startup and logonAssign a default credential providerAssign a default domain for logonBlock user from showing account details on sign-in