How to disable Windows Hello for Business

Method 1: Using Group policy settings.

If using Windows 10 Pro edition, it’s possible to change the group policy settings to disable PIN sign-in option for all users.

1. Open the Run dialog box by pressing the Windows key and the R key together.
2. Type GPEDIT.MSC and hit the Enter key.
3. Go to Computer Configuration -> Administrative Templates -> System -> Logon.
4. On the right side, double-click on Turn on PIN sign-in and select Disabled.
5. Similarly, disable the other Windows Hello options if any.
6. Exit the Group policy editor and reboot the computer.

If Biometrics are available on the system, disabling them will also effectively “disable” the Windows Hello Prompt on OV enrollment.

• Open the Run dialog box by pressing the Windows key and the R key together.
• Type GPEDIT.MSC and hit the Enter key.
• Go to Computer Configuration -> Administrative Templates -> Windows Components -> Biometrics
• On the right side, double-click on Allow the use of Biometrics and select Disabled.
• Similarly, disable the other Windows Hello options if any.
• Exit the Group policy editor and reboot the computer.

Method 2: Disabling Windows Hello in Registry. If setting Group policy doesn’t work, sign-in options can be disabled, which should deactivate Windows Hello options for all user accounts.

Disclaimer: The registry is a database in Windows that contains important information about system hardware, installed programs and settings, and profiles of each of the user accounts on the computer. Windows often reads and updates the information in the registry.

Normally, software programs make registry changes automatically. Unnecessary changes to the registry should be avoided. Changing registry files incorrectly can cause Windows to stop working or make Windows report the wrong information.

Please take a backup of the registry. Follow the steps given in the link below:

• Open the Run dialog box by pressing the Windows key and the R key together.
• Type Regedit and hit the Enter key.
• When the Registry Editor opens, navigate to the following location:
• KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions.
• In the right pane, double click on the DWORD entry named value set it to 0. The above method will disable Windows Hello for all user accounts. To re-enable it, change the DWORD entry value back to 1.