Hello, The UsePin REG_DWORD value is set to 1 under registry location: HKLM\SOFTWARE\Policies\Microsoft\FVE I would appreciate if someone could please tell me which group policy controls this value in the registry. We only want to use TPM. We don't want TPM+PIN or TPM+KEY+PIN Thanks, Neel

Hi, Base on my research and test, there is no GPO to set disable PIN of Bitloker. Disable “Allow enhanced PINs for startup” and “Configure minimum PINlength for startup” doesn’t work. I’m afraid you should disable it via change registry. Thank you for your understanding. Regards, Leo Huang Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.