Hi Dawn Smith,
The PregenPool folder inside C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC may cannot be delete while Windows Hello and the related cryptographic services are actively using or locking it.
Since the original issue is having to set up the PIN again after every startup, I wouldn't recommend continuing to force-delete PregenPool. Deleting the entire NGC folder can also remove Windows Hello-related data and may make the issue worse.
It would be better to first check whether Windows Hello is actually retaining its configuration after a reboot. Running dsregcmd /status and checking the NgcSet status can help determine that.
If NgcSet changes back to NO after every restart, the underlying issue is likely with Windows Hello provisioning or persistence rather than simply the permissions on PregenPool.