A corrupted Windows Hello PIN store is a common cause of being forced to reset the PIN at every startup. Since deleting the NGC contents was already attempted but permission was blocked, the next step is to take ownership of the NGC folder, delete its contents, then recreate the PIN.
- Open Command Prompt as Administrator.
- Go to the NGC folder:
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC - Take ownership of the NGC folder:
- Right-click NGC > Properties > Security > Advanced
- Change Owner to the Windows sign-in account with admin access
- Apply the change and grant Full control
- Delete all files inside the NGC folder.
- This removes the current Windows Hello PIN data.
- Restart the computer.
- Go to Settings > Accounts > Sign-in options.
- Remove the current PIN if it is still listed, then add a new PIN.
If PIN setup still fails after that:
- Sign out and sign back in, then try creating the PIN again.
- If Windows asks to create the PIN again after one already exists, check for system updates and then try creating the PIN again.
- If the issue started after hardware or security changes, recreating the PIN is the supported recovery step.
Risk note: deleting contents from the NGC folder removes the existing Windows Hello PIN configuration, so password sign-in should be available before doing it.