Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

PIN authentication is not available in Windows 8 after joining a domain or after adding an Exchange email account. How do I enable it back?

share|improve this question

3 Answers 3

up vote 10 down vote accepted

By default, PIN authentication is disabled for domain logons.

There is a new group policy setting for allowing pin authentication. The description reads: "This policy setting allows you to control whether a domain user can sign in using a PIN. If you enable this policy setting, a domain user can set up and sign in with a PIN. If you disable or don't configure this policy setting, a domain user can't set up and use a PIN. Note that the user's domain password will be cached in the system vault when using this feature."

The setting is located by running GPEdit.msc Then navigate to Computer Configuration -> Administrative Templates -> System -> Logon -> Turn on pin sign-in. Set this setting to enabled to allow domain users to use a pin when signing in to the computer.

share|improve this answer

It's still there, at least in mine. Go to your Start Screen -> Win + I (or bring up settings charm) -> Change PC Settings (at the bottom) -> Users -> Sign in options -> create a pin :)

share|improve this answer
1  
Nope. Not in mine. I'm logged in with a domain user, on a domain-joined pc. Could that be the problem? Then there should be a setting in gpedit to reenable it? –  Hannes Nel Jun 13 '12 at 2:08

Some users might experience same behavior without being in any domain. The same happens if you add an MS Exchange account to the mail app. Immediately after adding this sort of account the PIN option disappears.

share|improve this answer
    
Yep, this happened to me top. I've deleted the Exchange account but the PIN logon is still disabled. Of course the policy for domain users doesn't apply to me. –  Lorenzo Nov 19 '12 at 1:00
    
That's because Exchange, like domain logins, has the ability to enforce group policy requirements. It is able to push out GPO settings to ensure that minimum security standards are met by the users computer. It does so even with mobile devices. –  Julian Knight Jan 21 '13 at 17:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.