Install Intune Require PIN for Pairing Policy

This guide provides assistance with implementing the Require PIN For Pairing Policy through the use of Intune’s Settings Catalog. The task will be carried out by utilizing Intune’s Configuration Profiles.

Require PIN For Pairing Policy pertains to connections with Wireless Display devices. It mandates the obligatory use of a PIN for pairing, rendering it a requirement rather than a choice. Conversely, it signifies the prohibition of push-button pairing.

When activated, it prioritizes the use of a Personal Identification Number (PIN) for pairing with Wireless Display devices, giving precedence to this method over the Push Button pairing option. When this policy setting is either disabled or not configured, Push Button pairing is permitted by default, although it may not be the preferred method.

The Wireless Display policy specifically governs the manner in which devices establish connections with Wireless Display devices. Under this policy, utilizing a Personal Identification Number (PIN) for pairing becomes mandatory, eliminating the option for it to be merely discretionary.

Patch My PC
Install Intune Require PIN For Pairing Policy Fig.1
Install Intune Require PIN For Pairing Policy Fig.1

Install Intune Require PIN for Pairing Policy

To create a Require PIN For Pairing Policy, follow the steps stated below:

  • Sign in to the Intune Admin Center portal https://intune.microsoft.com/.
  • Select Devices > Windows > Configuration profiles > Create a profile.

In Create Profile, I select Windows 10 and later in Platform and select Profile Type as Settings catalog. Click on the Create button.

Install Intune Require PIN For Pairing Policy Fig.2
Install Intune Require PIN For Pairing Policy Fig.2

On the Basics tab pane, I provide a name for the policy as “Require PIN For Pairing Policy.”

  • Optionally, if you want, you can enter a policy description and proceed by selecting “Next“.
Install Intune Require PIN For Pairing Policy Fig.3
Install Intune Require PIN For Pairing Policy Fig.3

Now in Configuration Settings, Click Add Settings to browse or search the catalog for the settings I want to configure.

Adaptiva
Install Intune Require PIN For Pairing Policy Fig.4
Install Intune Require PIN For Pairing Policy Fig.4

In the Settings Picker windows. I searched for the keyword Pin. I found the category Administrative Templates\Network\Wireless Display and selected this.

  • When I select that option as stated above, I see the sub-category Require PIN Pairing. After selecting that, click the cross mark at the right-hand corner, as shown below.
Install Intune Require PIN For Pairing Policy Fig.5
Install Intune Require PIN For Pairing Policy Fig.5

Here in Administrative Templates, I have enabled the Require PIN Pairing.

Install Intune Require PIN For Pairing Policy Fig.6
Install Intune Require PIN For Pairing Policy Fig.6

Using Scope tags, you can assign a tag to filter the profile to specific IT groups. One can add scope tags (if required). More details on Intune Scope Tags Implementation Guide.

  • Click Next to continue.

Now in Assignments, in Included Groups, you need to click on Add Groups and choose Select Groups to include one or more groups. Click Next to continue.

Install Intune Require PIN For Pairing Policy Fig.7
Install Intune Require PIN For Pairing Policy Fig.7

In the Review + Create tab, I review settings. After clicking on Create, changes are saved, and the profile is assigned.

Install Intune Require PIN For Pairing Policy Fig.8
Install Intune Require PIN For Pairing Policy Fig.8

After successfully creating the “Require PIN For Pairing Policy,” a notification will appear in the top right-hand corner confirming the action. You can also verify the policy’s existence by navigating to the Configuration Profiles list, where it will be prominently displayed.

Your groups will receive your profile settings when the devices check in with the Intune service. The Policy applies to the device.

Intune Report for Require PIN For Pairing Policy

From the Intune Portal, you can view the Intune settings catalog profile report, which provides an overview of device configuration policies and deployment status.

To track the assignment of the policy, you need to select the relevant policy from the Configuration Profiles list, which is the Require PIN For Pairing Policy. Then, you can review the device and user check-in status to determine whether the policy has been successfully applied.

  • If you require more detailed information, you can click on “View Report” to access additional insights.
Install Intune Require PIN For Pairing Policy Fig.9
Install Intune Require PIN For Pairing Policy Fig.9

Intune MDM Event Log – Require PIN For Pairing Policy

To verify the successful implementation of String or integer policies for Require PIN For Pairing Policy on Windows 10 or 11 devices through Intune, you can leverage event IDs 813 and 814.

These event IDs provide valuable insights into the Require PIN For Pairing Policy’s application status and the specific value assigned to the policy on those devices. In the case of this particular policy, the value is a String and is linked to the event ID 814.

By analyzing these event IDs, you can gain a clear understanding of the policy’s application status and the corresponding value associated with it on the devices in question.

To confirm this, you can check the Event log path – Applications and Services Logs – Microsoft – Windows – Devicemanagement-Enterprise-Diagnostics-Provider – Admin.

MDM PolicyManager: Set policy string, Policy: (SetPINEnforced), Area: (ADMX_wlansvc), EnrollmentID requesting merge: (5B88AEF1-09E8-43BB-B144-7254ACBBDF3E), Current User: (Device), String: (<enabled/>), Enrollment Type: (0x6), Scope: (0x0).

Install Intune Require PIN For Pairing Policy Fig.10
Install Intune Require PIN For Pairing Policy Fig.10

When I opened the above Event log, I found that the Require PIN For Pairing Policy I applied to the device was successfully implemented.

  • By reviewing the log entry shown in the above image, the Event Viewer, I came across essential information, including the Area and Enrollment ID.

These details play a significant role in identifying the corresponding registry path. To locate the specific information, please consult the table provided below:

AreaPolicyStringScopedEvent ID
ADMX_wlansvcSetPINPreferredEnabledDevice814
Table 1 – Install Intune Require PIN For Pairing Policy

The details presented in the table above for the Install Intune Require PIN For Pairing Policy can be employed to access the registry settings that hold the group policy configurations on a specific computer. To accomplish this, you can execute “REGEDIT.exe” on the target computer and navigate to the precise registry path where these settings are stored.

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\5B88AEF1-09E8-43BB-B144-7254ACBBDF3E\default\Device\ADMX_wlansvc

When you navigate the above path in the Registry Editor, you will find the registry key named SetPINPreferred. Also, when I navigated to the above path, I saw that the Registry Key was created successfully.

Registry NameData
SetPINPreferredEnabled
Table 2 – Install Intune Require PIN For Pairing Policy
Install Intune Require PIN For Pairing Policy Fig.11
Install Intune Require PIN For Pairing Policy Fig.11

Windows CSP Details SetPINPreferred

We will see Windows CSP Details for this Policy setting SetPINPreferred. In situations where the policy setting is either disabled or left unconfigured, the system defaults to allowing Push Button pairing. However, it’s important to note that even though push-button pairing remains an option under such circumstances, it might not be the recommended or preferred method according to the policy framework. Therefore, adherence to the specified PIN requirement is encouraged and considered the default approach unless otherwise configured.

CSP URI – ./Device/Vendor/MSFT/Policy/Config/ADMX_wlansvc/SetPINPreferred

Install Intune Require PIN For Pairing Policy Fig.12
Install Intune Require PIN For Pairing Policy Fig.12

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click hereHTMD WhatsApp.

Author

Abhinav Rana is working as an SCCM and Intune Admin with several years of experience. He loves to help the community by sharing his knowledge. He is a B.Tech graduate in Information Technology.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.