3 ms·
Just checked on my up-to-date win 11 22h2 pro. I can't set a pin by default. > Computer Config / Admin templates / Win components / Bitlocker / Os Drive / Requ
by vladvasiliu 3y ago
Just checked on my up-to-date win 11 22h2 pro. I can't set a pin by default.
> Computer Config / Admin templates / Win components / Bitlocker / Os Drive / Require additional authentication at startup
> If you disable or do not configure this policy setting, users can configure only basic options on computers with a TPM.
This enables tpm + pin and / or password unlock. But only numeric pins. If you want alphanumeric, or "enhanced", pins, you have to enable a separate GPO in the same place: allow enhanced pins for startup.
> If you disable or do not configure this policy setting, enhanced PINs will not be used.