Hello internet!

Short story:

I currently work in an organization where we use Windows Hello for Business as an “two-factor” authentication method. In some cases i need to completely remove the PIN-code from the computer (without having to re-install Windows 10). This is the only way i know of that really removes the PIN from the computer. Feel free to comment down below if you know another way.

 

How to remove Windows Hello for Business PIN from a computer:

1. The first thing we need to do is specifying the path to the NGC-folder (which holds the WHFB-keys)
2. Next, taking ownership of the folder (make sure that you’re running Powershell as an administrator)
3. And lastly, remove the folder and all of it’s content.
4. Now you need to reboot the computer, and the PIN should now be completely removed.
5. If you’re distributing WHFB using GPO, don’t forget to remove those aswell.

 

Powershell:

$path = "C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc"
takeown /f $path /r /D y
Remove-Item -Force -Recurse -Path "$path\*" -erroraction 'silentlycontinue'

 

 

If you don’t want to use Powershell, you can follow this great guide on how to take full ownership of a folder, after that is done you just have to remove the following folder:

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc