How can I postpone Windows Hello PIN setup during device onboarding?
Asked by
MellowCedar42
Our company joins all laptops to Entra ID. Before handing a device to a new employee, we sign in as that employee to configure Outlook, printers, and other basics. We use a Temporary Access Pass to get through MFA, but Windows still requires us to enroll in Windows Hello for Business and create a PIN. Is there a reliable way to postpone or skip PIN enrollment during preparation so the employee can complete it during their first real login? Right now, we create a temporary PIN and then have to help the employee replace it later.
Answers
The old workaround of pressing Escape, disconnecting the network, or choosing “Continue anyway” is inconsistent on current Windows builds. It may get you to the desktop temporarily, but Windows will continue prompting for Hello enrollment and can eventually block the sign-in flow.
Reply to this answer
A longer-term solution is to avoid signing in as the employee at all. Use automated provisioning and device-management policies to install applications, configure printers, and apply settings. Then the employee completes Windows Hello enrollment themselves, which avoids creating and later replacing a temporary PIN.
Reply to this answer
If you have a device-management system, the cleanest approach is to temporarily disable or defer Windows Hello for Business enrollment through policy. Without that, you can create a separate provisioning OU and apply a Group Policy that prevents Hello enrollment while the laptop is being prepared. Move the device into the normal OU afterward so the employee is prompted to enroll on their first login.
Reply to this answer
You can create the PIN during setup and remove the Windows Hello registration as the final preparation step. The employee should then be prompted to create a new PIN at their next sign-in. Be aware that deleting the registration may not take effect immediately if the device has cached credentials or has not synchronized with Entra yet.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions