deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-22 22:03:46 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Additional changes required

Browse Source
This commit is contained in:
Paolo Matarazzo
2022-08-01 17:13:27 -04:00
parent 51b3d99e77
commit 039a12d812
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md
View File

@ -33,9 +33,9 @@ Destructive and non-destructive PIN reset use the same steps for initiating a PI
### Reset PIN from Settings ### Reset PIN from Settings
- Sign-in to Windows 10 using an alternate credential 1. Sign-in to Windows 10 using an alternate credential
- Open **Settings**, select **Accounts** > **Sign-in options** 1. Open **Settings**, select **Accounts** > **Sign-in options**
- Select **PIN (Windows Hello)** > **I forgot my PIN** and follow the instructions 1. Select **PIN (Windows Hello)** > **I forgot my PIN** and follow the instructions
### Reset PIN above the Lock Screen ### Reset PIN above the Lock Screen
@ -105,7 +105,7 @@ Before you can remotely reset PINs, you must register two applications in your A
Before you can remotely reset PINs, your devices must be configured to enable PIN Recovery. Follow the instructions below to configure your devices using either Microsoft Intune, Group Policy Objects (GPO), or Configuration Service Providers (CSP). Before you can remotely reset PINs, your devices must be configured to enable PIN Recovery. Follow the instructions below to configure your devices using either Microsoft Intune, Group Policy Objects (GPO), or Configuration Service Providers (CSP).
#### [Intune](#tab/intune) #### [✅ **Intune**](#tab/intune)
You can configure Windows devices to use the **Microsoft PIN Reset Service** using Microsoft Intune. You can configure Windows devices to use the **Microsoft PIN Reset Service** using Microsoft Intune.
@ -134,7 +134,7 @@ You can configure Windows devices to use the **Microsoft PIN Reset Service** usi
> 1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) > 1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431)
> 1. Select **Endpoint security** > **Account protection** > **Create Policy** > 1. Select **Endpoint security** > **Account protection** > **Create Policy**
#### [GPO](#tab/gpo) #### [✅ **GPO**](#tab/gpo)
You can configure Windows devices to use the **Microsoft PIN Reset Service** using a Group Policy Object (GPO). You can configure Windows devices to use the **Microsoft PIN Reset Service** using a Group Policy Object (GPO).
@ -143,13 +143,13 @@ You can configure Windows devices to use the **Microsoft PIN Reset Service** usi
1. Enable the **Use PIN Recovery** policy setting located under **Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business** 1. Enable the **Use PIN Recovery** policy setting located under **Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business**
1. Close the Group Policy Management Editor to save the Group Policy object 1. Close the Group Policy Management Editor to save the Group Policy object
#### [CSP](#tab/csp) #### [✅ **CSP**](#tab/csp)
You can configure Windows devices to use the **Microsoft PIN Reset Service** using the [PassportForWork CSP](/windows/client-management/mdm/passportforwork-csp). You can configure Windows devices to use the **Microsoft PIN Reset Service** using the [PassportForWork CSP](/windows/client-management/mdm/passportforwork-csp).
1. OMA-URI: `./Vendor/MSFT/Policy/PassportForWork/`*TenantId*`/Policies/EnablePinRecovery` - OMA-URI: `./Vendor/MSFT/Policy/PassportForWork/`*TenantId*`/Policies/EnablePinRecovery`
1. Data type: **Boolean** - Data type: **Boolean**
1. Value: **True** - Value: **True**
>[!NOTE] >[!NOTE]
> You must replace `TenantId` with the identifier of your Azure Active Directory tenant. > You must replace `TenantId` with the identifier of your Azure Active Directory tenant.