Windows Hello PIN is unavailable on Windows 10/11. (Solved)
If you can't add a Windows Hello PIN in Windows 10/11 because the PIN option is grayed out or unavailable with the description "Something went wrong. Try again later", continue reading below to fix the problem.
Windows Hello lets you sign in to your Windows 10/11 PC, apps, and online services using a PIN, your face, or a fingerprint. The use of a Hello PIN gives you greater security and security compared to a password because the PIN is stored only on the device it is set, therefore it is useless for anyone who does not have physical access to the associated device. This means that someone who steals your password can log into your account from anywhere, but if he steals your PIN he must have stolen your device in the first place, otherwise the PIN is useless.
However, some users report that they can't set their Windows Hello PIN because they get the message "This option is currently unavailable – Something went wrong. Try again later". If you face the same error, read the instructions below to fix the problem.
FIX: Windows Hello PIN is Currently Unavailable or Greyed Out on Windows 10/11.
The message "Windows Hello PIN is currently unavailable" can appear either on standalone computers (personal computers), or on computers that are members of an Active Directory or Azure AD domain (domain joined computers). So, depending on your situation follow the instructions in the respective part below.
- Part 1. Enable Windows Hello PIN on Personal PCs.
- Part 2. Enable "Windows Hello Convenience PIN" on Personal or Domain PCs in Active Directory.
- Part 3. Enable "Windows Hello for Business PIN on organization PC's. (Active Directory, Intune).
Part 1: FIX Windows Hello PIN not available on Personal Computers.
Method 1. Sign-in with your Password.
The first method to fix error "Windows Hello PIN option is not currently available", is to try to see if you can add the PIN after signing in with your account password (and not the PIN).
1. Sign-Out of Windows.
2. On the login screen, select Sign-in Options and then click the key icon
3. Enter your account password to log in to Windows.
4. After login, try to add a PIN.
Method 2. FIX Windows Hello PIN not available by Removing Work or School Accounts.
The second method to resolve the "Windows Hello PIN is currently unavailable" error, is to remove the Work or School accounts from your PC.
1. Click the Start menu, select Settings and then Accounts.
Â
2. From the left pane, select Access work or school.
Â
3. Click the associated account from your work or school, select Disconnect.
4. Now proceed to setup your PIN. *
* Note: After setting your PIN, and if you want, you can add again your Work/School account. But in the last step uncheck the option Allow my organization to manage this device and click No Sign in to this app only.
Method 3. Re-Sign-in with your Microsoft Account.
Another method to resolve the Windows Hello PIN is unavailable problem, is to Sign-in to Windows with a Local Account and then to re-sign-in with your Microsoft Account.
1. Click the Start menu, select Settings and then Accounts.
2. Select Your info from the left panel and click Sign in with a local account instead in the right pane.
Â
3. In the next window, type your Password for your Microsoft account password and hit Next.
4. At next screen, type a name of the local account and type a new password (twice). Then type a password hint and click Next to proceed.
5. Then hit the Sign out and finish button.
6. Finally, sign back into Windows using the local account.
7. Restart you PC and login to Windows.
8. Now go again to Settings > Accounts > Your Info.
9. Click Sign in with a Microsoft account instead and follow the on-screen instructions to add your Microsoft Account again.
10. Once done, proceed to setup the PIN. If the problem persists, continue reading below.
Part 2. FIX Windows Hello PIN not available on Active Directory Computers.
If you want to enable Windows Hello Pin on a computer that doesn't belong to an organization, or if you don't want to use Windows Hello for Business in your organization, proceed to the methods below. *
* Notes:
1. The below methods commonly applies to computers who are joined to an Active Directory domain and the Hello PIN option is not available.
2. If you want to use Windows Hello for Business PIN skip to Part-3 below.
Method 1. Allow Domain PIN Log-On in Registry.*
In Domain environments, that don't use Windows Hello for business, you must allow the Hello PIN sign-in, in workstations:
1. Open Registry Editor. To do that:
1. Simultaneously press the Win
+ R keys to open the run command box.
2. Type regedit and press Enter to open Registry Editor.
2. Navigate to this key at left pane:
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
3. Right-click at an empty space at right pane and select New > DWORD (32-bit value).
4. Name the new value: AllowDomainPINLogon
5. Finally double-click to open the new value and set the Value data to 1 and click OK
6. Restart your PC and try to add a Windows Hello PIN again. If you can't proceed to next method.
Method 2. Enable "Turn on convenience PIN sign-in" using Group Policy.
If you are experiencing the reported problem on computers that have been set up for an organization (e.g. Active Directory, Intune), but you don't want to use Windows Hello for Business, proceed to enable the "Turn on convenience PIN sign-in" in Group Policy: *
* Note: If you want to use Windows Hello for Business PIN skip to Part- 3 below.
1. Open the Local Group Policy Editor (gpedit.msc), or edit the Default Domain Policy GPO and navigate to:
- Computer Configuration\Administrative Templates\System\Logon
2. On the right side open the Turn on convenience PIN sign-in policy.
3. Set the policy to Enabled
Â
4. Close the Group Policy Editor and restart the PC. *
* Note: If you change the Default Domain Policy GPO, then restart the workstations to "see" the change.
Â
Part 3. FIX Windows Hello for Business PIN is currently unavailable.
If your computer belongs to an organization and you want to use the Windows Hello for Business PIN, but is unavailable, proceed and enable the "Windows Hello for Business" in Active Directory, or on Azure AD (Intune).
A. Enable Windows Hello for Business PIN sign-in in Active Directory.*
* Note: This method can be applied either on clients side or in Domain Controller.
1. Open the Local Group Policy Editor (gpedit.msc), or edit the Default Domain Policy GPO and navigate to:
-
Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business
2. Open the Use Windows Hello for Business policy, set it to Enabled and click OK. *
* Note: If you want to disable the Windows Hello Business provisioning that prompts to use Windows Hello with your account, check also the option "Do not start Windows Hello Provisioning after sign-in. (This option is not available on Windows Server 2016/2019)
3. Restart your PC to apply the change. *
* Note: If you enable the Windows Hello Business using a GPO, restart only the workstations.
B. Enable Windows Hello for Business PIN sign-in in Microsoft Intune.
To Enable Windows Hello for Business in Microsoft Intune.
1. Sign to Microsoft Endpoint Manager admin center with an Intune Administrator role.
2. Select Devices on the left and at the right go to Windows -> Windows enrollment.
3. Open Windows Hello for Business and under Configure Windows Hello for Business, select Enabled.
That's it! Which method worked for you?
Let me know if this guide has helped you by leaving your comment about your experience. Please like and share this guide to help others.
Tina R
April 7, 2023 @ 8:56 pm
Very helpful tips! Thank you very much.