Skip to main content
This article explains how to update a local session password from the Primo cockpit. This action allows administrators to remotely update or reset user passwords on managed devices.

​
Prerequisites

  • You are an administrator of your company space.
  • The device is enrolled in the MDM.
  • The device is Online (powered on and connected to the internet).
  • An administrator session exists on the device.

​
Update the password from Primo

  1. In the device details page, go to the Users tab.
  2. Click Action next to the session you want to modify.
  3. Enter the new temporary password and save it.
You can monitor the password change status in the Logs tab.

​
Use the new password on the device

You or the user can sign in with the new credentials at the next session login. The local session password is now updated.

​
Resetting Windows Hello PIN

If the Windows Hello PIN code does not work and the user cannot use their password, you can reset the PIN by running a PowerShell script that deletes the Windows Hello PIN folder (NGC) and restarts the related service:
  • This script stops the NgcCtnrSvc service.
  • Takes ownership and sets permissions on the NGC folder.
  • Removes NGC folder contents to force PIN recreation.
  • Restarts the NgcCtnrSvc service.
The user will be required to create a new PIN after the reset. Important:
  • Import and run the script with Fleet
  • Ideally, execute the script when the user is logged off.
  • Logs for this operation are saved at C:\ProgramData\MDM\Logs\Reset-WindowsHelloPIN.log.
Refer to the Password Policy and Resolve a login issue related to a password articles for additional guidance on password and PIN management.