A brief secret code. The Windows Hello for Business kind is bound to a single machine and protected by its TPM, which means it stays put rather than travelling like a password does. App protection policies may additionally ask for a separate app-level code.
Also called personal identification number.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains PIN in context, with comparison tables and the common traps.
Terms in this definition
- Secret
Object in Key Vault storing an arbitrary string value, for instance a password, API key or connection string.
- Windows Hello for Business
Sign-in for Windows that needs no password and resists phishing, provided the device has suitable hardware.
- TPM
Tokens per minute, the measure for Azure OpenAI quota and deployment rate limits. Going over it produces an HTTP 429 response.
- LIKE
Compares strings with a pattern that can contain the % and _ wildcards. Because it only understands character patterns, searching big volumes of text this way is much slower than using full-text search.
- App protection policy
A set of Intune rules on managed apps that safeguards organisational data, for example by demanding a PIN or preventing copy-paste and save-as into personal apps. It works whether or not the device is enrolled.
Related terms
- Azure Backup security PIN
Short-lived PIN, valid for five minutes, created from a Recovery Services vault's Properties. Hybrid backups through MARS, MABS or DPM ask for it before critical actions such as stopping protection with data deletion or changing the passphrase; Azure VM backups aren't covered.
- BitLocker Network Unlock
Lets domain-joined servers reboot without anyone typing a PIN: when they're on a trusted wired network, a WDS server holding the Network Unlock certificate unlocks the system drive.
- MATCHBY
Used within DAX window functions such as OFFSET, WINDOW, INDEX, RANK and ROWNUMBER, this lists the columns that pin down which row is current when the data lacks a unique key.
- Network Unlock
With this BitLocker capability, domain-joined machines secured by TPM plus PIN can boot without the PIN when connected by cable inside the company. A certificate and a WDS server running Network Unlock are prerequisites.
- Organizational visuals
Custom visuals that a Fabric admin makes available company-wide from the admin portal, taken from AppSource or uploaded as .pbiviz files. Report builders reach them via the My organization tab, and admins may pin them for everyone.
- Passwordless authentication
Replaces the password with a device you own plus a PIN or biometric; examples include passkeys, Microsoft Authenticator and Windows Hello for Business.
- Remote lock
Locks a device's screen from Intune so that only the current passcode will open it again; Macs also get a six-digit recovery PIN.