Forum Discussion
Disable sign in to Windows device (fast)
Hi, When using Intune along with WHfB PIN, what is the best approach to disable sign-in to Windows PC (using WHfB PIN)? Wipe command is not an option in this case, we just need to block access to th...
The quickest method of disabling sign-in to a Windows PC with Intune without wiping it is through the Remote Lock feature, which instantly signs out the user and needs an admin to unlock. Another method is to flag the device as non-compliant, which can activate Conditional Access policies to block sign-ins. Disabling Windows Hello for Business (WHfB) via Account Protection policies might assist, but cached PINs can still grant local access. To further limit access, revoking the user from local access groups and rotating the BitLocker key (if encryption is being used) can block unauthorized access to files.
