CredentialProvider Pin

This section is used to enter PIN dialog with Credential Provider. Must be disabled when used with Full Credential Provider.

Enable

This entry specifies whether Pin Provider should be enabled or not.

0: Pin Provider not available
1: Pin Provider available

AutoLogon

This entry specifies the automatically logon behavior in situations where there is only a single credential available and the PIN already has been entered. The dialog will be shown but the PIN entry will be automatically filled and the ok button will automatically be pressed.

0: Will not use automatically logon
1: Will use automatically logon

Default value is 0; automatically logon is disabled.

DisableAutoLogon

This entry specifies a list of applications that should not use the automatically logon feature. Use ; to separate the applications. Default Windows logon applications "logonui.exe;lsass.exe".

DisableAutoLogon=lsass.exe;logonui.exe

InitChangePin

This entry is used to force a PIN change for Pin Provider. Used together with PinExpire in SmartCard section.

0: Will not force PIN change
1: Will force PIN change for windows logon
2: Will force PIN change for CredUI
3: Will force PIN change for all scenarios

Default value is 3; force PIN change for all scenarios.