Published by


Brink's Avatar
Administrator

Join Date: Jul 2009
Posts: 22,564

How to Enable or Disable PIN Sign-in for Domain Users in Windows 8 and 8.1

information   Information
Windows 8 comes with a feature that allows you to sign-in with a 4 digit PIN to your local account or Microsoft account. However, domain users have this feature disabled by default, and cannot sign-in to Windows 8 with a PIN.

This tutorial will show you how to enable or disable domain users to be able to create a PIN to sign-in to Windows 8 or Windows RT with.

You must be signed in as an administrator to be able to do the steps in this tutorial.


EXAMPLE: PIN sign-in to Windows 8

Click image for larger version





PIN Sign-in for Domain Users - Enable in Windows 8 OPTION ONE PIN Sign-in for Domain Users - Enable in Windows 8
Enable or Disable PIN Sign-in for Domain Users using a REG File


Note   Note
The .reg files below are for the registry key and value below.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System

AllowDomainPINLogon DWORD

0 = Disable PIN for Domain users
1 = Enable PIN for Domain users


1.
Do step 2 or 3 below for what you would like to do.

2. To Disable PIN Sign-in for Domain Users

NOTE: This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Disable_Domain_PIN_Sign-in.reg

download

3. To Enable PIN Sign-in for Domain Users

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Enable_Domain_PIN_Sign-in.reg

download

4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. If prompted, click/tap on Run, Yes (UAC), Yes, and OK.

7. When finished, you can delete the downloaded .reg file if you like.







PIN Sign-in for Domain Users - Enable in Windows 8 OPTION TWO PIN Sign-in for Domain Users - Enable in Windows 8
Enable or Disable PIN Sign-in for Domain Users in Group Policy

NOTE: This option for using group policy is only available in the Windows 8 Pro and Windows 8 Enterprise editions.

1.
From the Start screen, start typing gpedit.msc, and press Enter when finished.
NOTE: You could also press Windows+R to open the Run dialog, type gpedit.msc, and click/tap on OK.

2. If prompted by UAC, then click/tap on Yes.

3. In the left pane, click/tap on to expand Computer Configuration, Administrative Templates, System, and open Logon. (see screenshot below)

Click image for larger version

4.
In the right pane of Logon, double click/tap on Turn on PIN sign-in. (see screenshot above)

5. Do step 6 or 7 below for what you would like to do.

6. To Disable PIN Sign-in for Domain Users

A) Select (dot) Disabled or Not Configured, click/tap on OK, and go to step 8 below. (see screenshot below step 7A)
NOTE: Not Configured is the default setting.

7. To Enable PIN Sign-in for Domain Users

A) Select (dot) Enabled, click/tap on OK, and go to step 8 below. (see screenshot below)

Click image for larger version

8. You can now close the Local Group Policy Editor window if you like.



That's it,
Shawn