Forum Discussion
How to see which users only implement the pincode in Windows Hello?
Hi Khalid,
That information lives locally on the endpoint in the registry and is not synced up to Entra ID or Intune by default, so it cannot be pulled from a portal report.
The practical way to get this at scale is an Intune Proactive Remediation script pair (detection + optional remediation) that reads the relevant registry values on each device and reports back the registered WHfB methods and the last-used method. There is a published example built on top of scripts originally written by Marius Wyss, available here:
https://github.com/MrWyss-MSFT/Intune-Remediation-Scripts (WH4B / Enrolled Methods folder)
You run it as a detection script across your device population through Intune and it surfaces per-device results (PIN only, PIN + fingerprint, PIN + face, etc.) that you can then export and filter for the "PIN only" group to target for adoption outreach.
This reads local device state, so a user with multiple enrolled devices may show differently on each one, and you would want to decide whether "PIN only everywhere" or "PIN only on primary device" is the bar for your outreach list.