Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

PIN authentication is not available in Windows 8 after joining a domain or after adding an Exchange email account. How do I enable it back?

share|improve this question
up vote 11 down vote accepted

By default, PIN authentication is disabled for domain logons.

There is a new group policy setting for allowing pin authentication. The description reads: "This policy setting allows you to control whether a domain user can sign in using a PIN. If you enable this policy setting, a domain user can set up and sign in with a PIN. If you disable or don't configure this policy setting, a domain user can't set up and use a PIN. Note that the user's domain password will be cached in the system vault when using this feature."

The setting is located by running GPEdit.msc Then navigate to Computer Configuration -> Administrative Templates -> System -> Logon -> Turn on pin sign-in. Set this setting to enabled to allow domain users to use a pin when signing in to the computer.

share|improve this answer

It's still there, at least in mine. Go to your Start Screen -> Win + I (or bring up settings charm) -> Change PC Settings (at the bottom) -> Users -> Sign in options -> create a pin :)

share|improve this answer
Nope. Not in mine. I'm logged in with a domain user, on a domain-joined pc. Could that be the problem? Then there should be a setting in gpedit to reenable it? – Hannes Nel Jun 13 '12 at 2:08

Some users might experience same behavior without being in any domain. The same happens if you add an MS Exchange account to the mail app. Immediately after adding this sort of account the PIN option disappears.

share|improve this answer
Yep, this happened to me top. I've deleted the Exchange account but the PIN logon is still disabled. Of course the policy for domain users doesn't apply to me. – Wizard79 Nov 19 '12 at 1:00
That's because Exchange, like domain logins, has the ability to enforce group policy requirements. It is able to push out GPO settings to ensure that minimum security standards are met by the users computer. It does so even with mobile devices. – Julian Knight Jan 21 '13 at 17:55

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .