Windows Hello (PIN) - Activate with NTLite?

[Qu1goN]

Hello, sorry my english ist not the best.

I use a local account and Windows Hello (PIN) to log into windows - so I only have to enter the password and not confirm with enter.

I also use an autounattend.xml in which I have already assigned a password (PIN) for my account. Autologon is of course on false.

But I always have to set Hello manually after the installation.
Can this be activated in advance with NTLite? Thank you.

 

[garlin]

There is no way to activate Windows Hello during unattended setup, or assign a PIN to an user account. It must be done manually during new user setup, or from the Settings screen. While you can set user passwords with a command, you cannot create PIN's.

Windows does this for security reasons.

 

[Hammer of the Gods]

My image is still in the testing phase (VM). I can't seem to find the option to set a PIN at all in settings. The only login method settings is showing me is password. Is that a VM thing or did I accidentally remove it? Pretty sure I didn't touch anything related to that, the only thing close was disabling picture password.

 

[garlin]

Works on VM, you probably removed a required component.

 

[Qu1goN]

Too bad it can't be done. So I always have to create the Hello Pin manually. Thank you.

 

[francis11]

Why make an image demant 2 factor login on a local install (private user) - it don't make sence.

 

[Taosd]

With the whole PIN thing, from experience, i have experienced it from using Biometrics. i don't recall it from other services offhand

 

[francis11]

Biometric is HELLO and NTL remove it very well - who needs it as a private user?

 

[Hammer of the Gods]

Works on VM, you probably removed a required component.

That's unfortunate, considering I didn't think I did I'm not sure what component I need to add back... crap. I really prefer a strong long password, and a somewhat long strong PIN that I can enter with one hand in less than a second.

 

[garlin]

That's unfortunate, considering I didn't think I did I'm not sure what component I need to add back... crap. I really prefer a strong long password, and a somewhat long strong PIN that I can enter with one hand in less than a second.

Exactly. Some users prefer it as an option, if they're forced to use a strong password.

 

[Taosd]

Biometric is HELLO and NTL remove it very well - who needs it as a private user?

Everyone has their own quarks and preferences. I personally prefer using it

 

[Hammer of the Gods]

I just checked again and I still can't find what the culprit is. I have Biometric (+Windows Hello, YubiKey) selected in compatibility.

 

[garlin]

Post your preset (after removing any user passwords or Windows license keys).

 

[Hammer of the Gods]

Post your preset (after removing any user passwords or Windows license keys).

Only things in my preset that aren't present in this one I'm posting are a few registry tweaks related to power and context menus and my post setup program install script. And of course my local account.

 

[garlin]

Try reverting the UAC settings, and see if Windows Hello works.

 

[Hammer of the Gods]

Alright. Setting that up now then building and loading to VM. Should just be enabling UAC in settings tab correct?

 

[Hammer of the Gods]

Do I need to turn all the UAC setting back on or is there a main one(s) I need?

 

[garlin]

Open the XML in Notepad, remove all the lines in between <TweakGroup name="UAC"> to </TweakGroup>. This is faster, and safer.

 

[Hammer of the Gods]

Try reverting the UAC settings, and see if Windows Hello works.

No luck. All UAC settings returned to default, still no Windows Hello options

 

[Hammer of the Gods]

I think you can see why I'm confused after seeing my preset. The only thing I thought it might be was UAC as well, but apparently not. Nothing else related to login or "biometrics" was disabled abart from picture password, which has it's own component check mark and no dependency, so I don't think that would cause the issue either.