This list will be based on the different authentication methods enabled in your tenant (like Password, PIN, Security key). Select an authentication option from the list of presented options.Select I forgot my PIN from the PIN credential provider.If the PIN credential provider isn't selected, expand the Sign-in options link, and select the PIN pad icon.Select PIN (Windows Hello) > I forgot my PIN and follow the instructions.Open Settings, select Accounts > Sign-in options.Sign-in to Windows 10 using an alternate credential.If AD FS is being used for certificate trust or for on-premises only deployments, users must also have corporate network connectivity to federation services to reset their PIN.
If users don't have an alternate way to sign into their devices, PIN reset can also be initiated from the Windows lock screen in the PIN credential provider.įor hybrid Azure AD-joined devices, users must have corporate network connectivity to domain controllers to complete destructive PIN reset. If users have forgotten their PINs, but have an alternate sign-in method, they can navigate to Sign-in options in Settings and initiate a PIN reset from the PIN options. During a non-destructive PIN reset, the user's Windows Hello for Business container and keys are preserved, but the user's PIN that they use to authorize key usage is changed.ĭestructive and non-destructive PIN reset use the same steps for initiating a PIN reset. For non-destructive PIN reset, you must deploy the Microsoft PIN reset service and client policy to enable the PIN recovery feature. During a destructive PIN reset, the user's existing PIN and underlying credentials, including any keys or certificates added to their Windows Hello container, will be deleted from the client and a new logon key and PIN are provisioned. Destructive PIN reset is the default and doesn't require configuration. There are two forms of PIN reset called destructive and non-destructive. For non-destructive PIN reset, you must deploy the Microsoft PIN Reset Service and configure your clients' policy to enable the PIN Recovery feature.
Users are required to authenticate and complete multi-factor authentication to reset their PIN. Windows Hello for Business provides the capability for users to reset forgotten PINs using the I forgot my PIN link from the Sign-in options page in Settings or from the Windows lock screen.
0 kommentar(er)
