How to Enable or Disable PIN Sign-in for Domain Users in Windows 8 and 8.1

Windows 8 comes with a feature that allows you to sign-in with a 4 digit PIN to your local account or Microsoft account. However, domain users have this feature disabled by default, and cannot sign-in to Windows 8 with a PIN.
This tutorial will show you how to enable or disable domain users to be able to create a PIN to sign-in to Windows 8 or Windows RT with.
You must be signed in as an administrator to be able to do the steps in this tutorial.
This tutorial will show you how to enable or disable domain users to be able to create a PIN to sign-in to Windows 8 or Windows RT with.
You must be signed in as an administrator to be able to do the steps in this tutorial.
EXAMPLE: PIN sign-in to Windows 8
OPTION ONE
Enable or Disable PIN Sign-in for Domain Users using a REG File

The .reg files below are for the registry key and value below.
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
AllowDomainPINLogon DWORD
0 = Disable PIN for Domain users
1 = Enable PIN for Domain users
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
AllowDomainPINLogon DWORD
0 = Disable PIN for Domain users
1 = Enable PIN for Domain users
1. Do step 2 or 3 below for what you would like to do.
2. To Disable PIN Sign-in for Domain Users
NOTE: This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Disable_Domain_PIN_Sign-in.reg
3. To Enable PIN Sign-in for Domain Users
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Enable_Domain_PIN_Sign-in.reg
4. Save the .reg file to your desktop.
5. Double click/tap on the downloaded .reg file to merge it.
6. If prompted, click/tap on Run, Yes (UAC), Yes, and OK.
7. When finished, you can delete the downloaded .reg file if you like.
OPTION TWO
Enable or Disable PIN Sign-in for Domain Users in Group Policy
NOTE: This option for using group policy is only available in the Windows 8 Pro and Windows 8 Enterprise editions.
1. From the Start screen, start typing gpedit.msc, and press Enter when finished.
NOTE: You could also press Windows+R to open the Run dialog, type gpedit.msc, and click/tap on OK.
2. If prompted by UAC, then click/tap on Yes.
3. In the left pane, click/tap on to expand Computer Configuration, Administrative Templates, System, and open Logon. (see screenshot below)
4. In the right pane of Logon, double click/tap on Turn on PIN sign-in. (see screenshot above)
5. Do step 6 or 7 below for what you would like to do.
6. To Disable PIN Sign-in for Domain Users
A) Select (dot) Disabled or Not Configured, click/tap on OK, and go to step 8 below. (see screenshot below step 7A)
NOTE: Not Configured is the default setting.
7. To Enable PIN Sign-in for Domain Users
A) Select (dot) Enabled, click/tap on OK, and go to step 8 below. (see screenshot below)
8. You can now close the Local Group Policy Editor window if you like.
That's it,
Shawn
Attachments
Last edited: