Introduction
This is a quick post to share how I got a user back up and running after encountering this Windows Hello for Business PIN setup error on an Intune managed device today.
The problem
The issue occurred when the user was trying to setup Windows Hello for Business (again) on their Intune managed device. WHFB had been setup before successfully but due to some support issues they needed to redo this WHFB wizard except when they tried to complete PIN setup, it errored out. Retrying as per the advice in the error didn’t help.
Microsoft account
Something went wrong
We weren’t able to set up your PIN. Sometimes it helps to try again or you can skip for now and do this later. Error code: 0x801c0451
The error shown is revealed below:
Solution
To resolve we did the following using an elevated account on the device.
Rename theĀ Accounts folderĀ from below path:
%LOCALAPPDATA%\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AC\TokenBroker
To something like Accounts.old
Once done, restart the computer.
After restarting the computer, get the user to logon to Windows, where they should be prompted to complete Windows Hello for Business setup
More info
I was actually surprised that Microsoft’s own https://aka.ms/PINErrors site actually lists this error, to be honest I didn’t check it until after I had resolved the problem.
Here it is. Their advice reveals that the error means there’s an issue with the User token switch account and that you need to delete files in the same path as above, it effectively achieves the same result as renaming that folder shown above.
0x801C0451 | User token switch account. | Delete the Web Account Manager token broker files located in %LOCALAPPDATA%\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AC\TokenBroker\Accounts\*.*\ and reboot. |
I hope this helps someone!
that’s it for now
cheers
niall