none
Remove PIN RRS feed

  • Question

  • I have applied a policy to force TPM and PIN. Now I have removed the PIN option. how do I get the pin removed from the device through MBAM?
    Tuesday, March 31, 2015 10:29 AM

Answers

All replies

  • Hello,

    You have two options:

    • Disable and unencrypt the drive and encrypt it again through MBAM
    • Use one of the following the command line in order to remove the PIN :
      manage-bde -protectors -add C: -tpm
      manage-bde -protectors -delete C: -Type TPMAndPIN

    Regards,


    Follow me on Twitter http://www.twitter.com/liontux | My Blog (French/English) : http://security.sakuranohana.fr/

    Tuesday, March 31, 2015 11:32 AM
  • After running the above commands to delete the PIN protector, make sure you have also changed the MBAM GPO settings to TPM only. O'wise you will be again prompted to define the PIN as protector for the encrypted drive.

    Regards, "Gaurav Ranjan" =========== NOTE: Mark as Answer and Vote as Helpful if it helps =======

    Wednesday, April 1, 2015 6:02 AM
  • Hi there,

    currently we got policy enable to setup pin for mbam encryption. if we disable the pin code policy, what will happen to the devices already encrypted and using pin ? ideally we looking a solution where users doesn't need to do anything on their side and we can just switch off the pin requirement and they doesn't get prompt for the pin even though they already setup and using.  any help ll be great. Thanks.
    Friday, October 9, 2015 3:50 PM