Call anytime and leave your contact details and requirements.

Call anytime and leave your contact details and requirements.


Your go to place for news, tips and tricks!

Cant remove windows pin - greyed out (working fix)

"If you've ever logged into your Windows 10 or 11 Pro PC using your Office 365 Business Standard account, you're already connected to Azure AD. You might have noticed that the 'Remove' option for PINs in Windows settings is mysteriously greyed out. Let's dive into how to make your life simpler.

Option 1: Our Handy PowerShell Script
Now, here's the cool part – we've got a slick PowerShell script that does the heavy lifting for you. No need to scroll down just yet; we'll guide you to it at the bottom of this page. This script not only kicks the PIN requirement to the curb but also tidies up any existing PINs. Just run it as an admin on each PC or deploy it with your preferred Remote Monitoring and Management (RMM) tool.

Option 2: InTune Subscription – The Power Move
The second option is going big with an InTune subscription. It's like having your own superhero for device management and security. With InTune, you're the boss, and you can configure settings like PIN requirements for each user. Yes, it comes with a price tag, but the level of control it offers is worth it.

Option 3: Group Policy (GP) – Taking the Captain's Chair
Feeling like the captain of your own ship? Then Group Policy is your trusted first mate when it comes to Windows settings. With GP, you can easily manage and disable the PIN requirement for your entire network. Sail on, security captain!

Option 4: Manual Registry Modification – The DIY Approach
If you're a hands-on kind of person, the fourth option is right up your alley – manual registry modification. Dive straight into the Windows registry on each PC and tinker around to disable that pesky PIN requirement. Just remember, with great power comes great responsibility, so tread carefully.

By the way, in Windows, the PIN hangs out in a folder called 'C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc.' It's like the secret stash where the system keeps all things PIN-related.

Ready for the PowerShell Script?
You'll find our fantastic PowerShell script at the bottom of this page. Give it a spin and breeze through those stubborn PINs on your Windows 10 and 11 Pro PCs connected to Azure AD. You've got this!"


Create a .PS1 file with the content below and open with Powershell in Admin mode - or download this file Click here

Powershell needs the security amended to allow a script to be run, type the following

Set-ExecutionPolicy RemoteSigned

Please be cautious when changing the execution policy, as it can introduce security risks. Make sure you trust the source of the script before changing this policy. After running your script, you can set the execution policy back to a more restrictive setting if desired:

Set-ExecutionPolicy Restricted 

# Script created by Pete Gypps
# Website: www.corsolutions.co.uk

# Prevents Windows 10 and Windows 11 from prompting to set up a PIN after being added to Azure AD

# Instructions:
# 1. Run this script in PowerShell with administrative privileges.
#    To do this, right-click on the PowerShell icon and choose "Run as administrator."

# Disable PIN requirement
$path = "HKLM:\SOFTWARE\Policies\Microsoft"
$key = "PassportForWork"
$name = "Enabled"
$value = "0"

try {
    New-Item -Path $path -Name $key –Force
    New-ItemProperty -Path $path\$key -Name $name -Value $value -PropertyType DWORD -Force
catch {
    Write-Host "Error disabling PIN requirement: $_"

# Delete existing PINs
$passportFolder = "C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc"

if (Test-Path -Path $passportFolder) {
    $confirmation = Read-Host "Are you sure you want to delete existing PINs? (Y/N)"
    if ($confirmation -eq "Y") {
        try {
            Takeown /f $passportFolder /r /d "Y"
            ICACLS $passportFolder /reset /T /C /L /Q
            Remove-Item –path $passportFolder –recurse -force
        catch {
            Write-Host "Error deleting existing PINs: $_"
    else {
        Write-Host "Operation cancelled."
Stay Informed

When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them.

Network share asking for email and password
Managed Service Provider (MSP) vs Business ICT Man...

Related Posts