Fix: Your Organization Requires You to Change Your PIN

The Your organization requires that you change your PIN message appears on the sign-in screen. It happens when the pin expiration limit is reached on a PC set up using an organization-based account, where they have control over the personal device.

But if you have set up Windows using a personal account, the error message shouldn’t ideally appear. Though that’s not always the case. Most users who face the error reported using a personal account.

Why does my organization require me to change my PIN on Windows 11?

It could be that your account is associated with an organization, and your primary approach should be to verify that. Contacting the domain administrator will help!

Besides, misconfigured local policy settings or incorrect Registry entries can also lead to the error. Even the account settings, when set up improperly, can trigger the Your organization requires you to change your password error in Windows 11.

How to turn off your organization requires you to change your PIN on Windows 11? 

Before we proceed with the slightly complex changes, try these quick solutions first:

• In case the PC is actually set up using an organization’s accounts, change the PIN as per their policies.
• Ask the administrator to remove the policy or increase the PIN expiration time frame.

If none work, head to the fixes listed next.

Tip

To execute the solutions listed below, you will need administrative privileges. If you are signed in with a standard account, switch to an administrator account and then proceed.

1. Remove the account and PIN

1. Press Windows + I to open the Settings app, go to the Accounts tab from the left pane, and click on Access work or school.
2. Expand the organization’s account, and click the Disconnect button.
3. Restart the computer for the changes to come into effect.
4. Then, again, open Settings, go to Accounts, and this time, click on Sign-in options.
5. Expand PIN (Windows Hello), and click the Remove button.
6. Confirm the change.
7. Now, set up another PIN for the Windows 11 PC and restart the computer to verify whether the error message goes away.

The easiest way to turn off Your organization requires you to change your PIN in Windows 11 is to disconnect the account and reset the PIN. In case the Remove PIN button is greyed out, reconfigure the security settings! Or if you find Windows PIN is no longer available, enable the CNG Key Isolation

2. Change the Local Group Policies

1. Press Windows + R to open Run, type gpedit.msc in the text field, and hit Enter.
2. Expand Administrative Templates under Computer Configuration, then double-click on System.
3. Choose PIN Complexity from the left pane.
4. Now, double-click the Expiration policy on the right.
5. Choose Not configured from the top left, and then click Apply and OK to save the changes.
6. Set all the other policies here to Not configured as well.
7. Similarly, set the policies in the following path as Not configured: Computer configuration/ Administrative templates/ Windows Components/ Windows Hello for Business
8. Finally, restart the computer and check for improvements.

The local policies help configure the PIN expiration, complexity and similar settings, and disabling the relevant ones will do the trick! Remember, gpedit.msc is only available in Pro and Enterprise editions. In case you are running Windows 11 Home, manually install the Local Group Policy Editor.

3. Use the Command Prompt

1. Press Windows + S to open Search, type Command Prompt in the search bar, right-click on the relevant result, and select Run as administrator.
2. Click Yes in the UAC prompt.
3. Now, paste the following command and hit Enter to disable password expiration for all accounts: wmic path Win32_UserAccount set PasswordExpires=False

4. Modify the Registry

1. Press Windows + R to open Run, type regedit in the text field, and click OK.
2. Click Yes in the prompt that appears.
3. Navigate the following path or paste it in the address bar and hit Enter: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity
4. If you can’t find the PassportForWork or PINComplexity key, right-click on the one before it in the path, hover the cursor over New, select Key, and name it accordingly.
5. Once done, right-click on PINComplexity, select New, choose DWORD (32-bit) Value, and name it Expiration.
6. Now, double-click the Expiration DWORD, enter 730 in the Value data text field, and click OK to save the changes.

While modifying the Registry Editor, you have the option to set the PIN expiration value between 1 and 730 (days). If the previous solutions didn’t work, we recommend you choose the upper limit here, and the Your organization requires you to change your PIN message will not appear for a long time.

5. Change the Local Users and Groups settings

Tip

The lusrmgr.msc utility is only available on the Pro and Enterprise editions. For those running Windows 11 Home, first, install Local Users and Groups.

1. Press Windows + R to open Run, type lusrmgr.msc, and hit Enter. 
2. Select Users from the navigation pane, and double-click the affected user profile on the right.
3. In the General tab, tick the checkbox for Password never expires, and click Apply and OK to save the changes.

6. Perform an in-place upgrade

1. Go to Microsoft’s official website, select the OS edition and product language, then download the Windows 11 ISO.
2. Double-click the ISO file and click Open in the confirmation prompt (appears after a few seconds of loading).
3. Now, run the setup.exe file.
4. Click Next in Windows 11 Setup to proceed.
5. Check the Microsoft’s license terms, and click Accept.
6. Verify that the setup reads, Keep personal files and apps, and then click on Install to start the in-place upgrade.

An in-place upgrade takes a few hours to complete but is an effective measure against any sort of corruption, be it the system files or a corrupt user profile. And you don’t lose any files or stored apps in the process.

7. Reset the PC to factory settings

When nothing else works, the last option is to reset Windows 11 to factory settings. Make sure to wipe out all the data on the PC. If required, move the relevant files to a USB storage device as a backup.

Once done, set up the PC all over again, and this time, use a Microsoft account. Even creating a local account will do! Using a local account will also help when you can’t set up a PIN (Windows Hello). 

If you still can’t get rid of the Your organization requires you to change your PIN error, find out how to bypass the Windows 11 login screen and access the PC without a password, but it shouldn’t come down to that for most users!

Remember, policies are important from the account sign-in point of view, and even slight misconfiguration can trigger errors, including cases when Windows asks to set up a PIN. Make sure the policies are in order, and you are good to go!

This isn’t the only problem you can experience with the organization, and many encountered Some settings are managed by your organization message, but we tackled that issue in a different guide.

For any queries or to share more solutions with us, drop a comment below.