In the event that users are still or constantly prompted for their PIN even though the PIN policy settings are configured correctly, it could be caused by Group Policy intervention. Below are two methods to "disable fast user switching" and have your PIN behavior work as expected.
This fix will apply to any authentication methods that require a PIN experiencing this behavior.
Method 1 - Group Policy
-
Open Run (Windows + R).
-
Type: "gpedit.msc"
-
In the navigation pane, go to:
Local Computer Policy\Comp Configuration\Administrative Templates\System\Logon -
Select the policy "Hide entry points for Fast User Switching". Double-click or (right-click > Edit) to configure this.
-
To disable this option, set it to "Enabled".

Method 2 - Registry
- Open regedit.
- Navigate to:
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ - Add the registry value:
Value Name Type Value HideFastUserSwitching DWORD 1
After running either method and restarting your computer, users should now only be prompted for PIN at the logon and no other times after (if this is what your computers are configured for). If the issue persists, please reach out to IA Support for further troubleshooting.
