Resetting Your Windows PIN When Already Signed In If you happen to have access to your Windows device, but still want to reset your PIN, start by opening the Start menu and then clicking the Settings gear. In the Windows Settings popup, click “Accounts.” Then, click Sign-In Options Windows Hello PIN I Forgot My PIN. Case 1: Forget PIN but Remember the Login Password. Step 1: In the login screen, you can click the key logo to input the login password of the account. Step 2:Open the “Settings” in Win menu and click on the “Account” icon to enter account settings. Step 3:Choose “Sign-in option” and click “I forgot my PIN”, you can reset your PIN now. If it is a local account, please input the. We know remembering a PIN can be tricky, so thanks to the Windows 10 May 2019 Update, Microsoft account users will find a revamped Windows Hello PIN reset experience on the Windows 10 lock screen with the same look and feel as signing in on the web. Try it by clicking the “I forgot my PIN” link when signing in to Windows with a PIN.
- Reset Windows Hello Pin Intune
- How To Change Your Pin Microsoft Account
- How To Reset Windows Hello Pin Chrome
Windows 10 has many ways to sign in to an account, including using PIN, which is a faster and convenient method of authentication compared to a traditional password. However, sometimes you won’t be able to use a PIN to login, trying to change or add a new PIN will result on a “Something went wrong. Try again later” error message, and you may even not be able to remove the current PIN from the Settings app.
When you experience problems using Windows Hello PIN, it’s likely that the system files responsible for this feature are missing or corrupted. Luckily, there’s a workaround that allows to quickly fix the problem.
In this guide, you’ll learn the steps to fix the issue that could prevent you from removing, configuering, or using a Windows Hello PIN to login on Windows 10.
How to fix Windows Hello PIN problems on Windows 10
To fix Windows Hello PIN when you can’t use, change, remove, or add PIN to your account, use these steps:
- Open Start.
- Search for Command Prompt, right-click the top result, and select the Run as administrator option.
- Type the first command to take ownership of the NGC folder and press Enter:
- Type the second command to take ownership of the NGC folder and press Enter:
- Open File Explorer.
- Browse to the following path:
- Click the Select all button from the “Home” tab.
- Click the Delete button from the “Home” tab.Warning: Deleting the contents of this folder will remove the Windows Hello PIN from every account configured on the device.
- Restart your device.
- Sign into your account using the password.
- Set up a new PIN (if applicable).
Once you complete the steps, you can start using your PIN again. If you didn’t get the prompt to create a PIN, you set up one in the Accounts settings page.
If you had more than one account configured on the device, each user will have to recreate their PIN as well.
Recently I have been troubleshooting a nasty Windows Hello for Business problem which prevented all users in a tenant from resetting their Windows Hello for Business PIN’s on Azure AD joined devices while getting the error CAA20004.
Issue
When clicking on “I forgot my PIN”:
After completing the account sign-in and MFA challenge the Error CAA20004 came up:
Troubleshooting
Reset Windows Hello Pin Intune
The Azure AD Portal shows us “Failure reason: other”.
While recording all the https traffic to Microsofts oauth2 endpoint with Fiddler this finally unveils usable information:
AADSTS65001: The user or administrator has not consented to use the application with ID ‘ 9115dd05-fad5-4f9c-acc7-305d08b1b04e’ named ‘ Microsoft Pin Reset Client Production’. Send an interactive authorization request for this user and resource.
The error indicates that an application registration is missing in the tenant for the application “Microsoft Pin Reset Client Production”
Solution
After a short search I found a matching Microsoft docs article. Instead of reading through the whole article the only thing I needed to do was consenthing to the: Microsoft PIN Reset Service production application and also for the Microsoft PIN Reset Client production
(just klick on the links in order to consent to the app registrations) as tenant admin. Although in some tenants I have only seen the “Microsoft PIN Reset Service production” and PIN resets are working without the “Microsoft PIN Reset Client production”.
When checking the registered enterprise applications in Azure AD the “Microsoft Pin Reset Client Production” was visible:
How To Change Your Pin Microsoft Account
… and resetting Windows Hello for Business PIN’s is from now on possible and works like a charm.
How To Reset Windows Hello Pin Chrome
Final words
Did you encounter the same difficulties? Or do you know why some tenants only have the “Microsoft PIN Reset Service production” and not the “Microsoft PIN Reset Client production” registered? I am curious to read your experiences in the comments.