Surface laptop for business PIN error

Which error code are you getting?

Settings → Accounts → Family & other users → Add someone else to this PC → "I don't have this person's sign-in info" → Add a user without a Microsoft account

Use this local account to log in, then re-link your Microsoft account from inside Windows

The behavior matches a Windows Hello PIN provisioning error during the “Create a PIN” step. On Surface devices this can block first sign‑in if the PIN setup fails.

Try the following steps in order:

1. On the PIN creation error screen
   • If an error code (for example, 0x801C03EF, 0x801C044D, 0x801C044E, 0xC00000BB, etc.) is shown, note it. Different codes have different mitigations.
2. Sign out and sign in again
   • From the error screen, return to the sign‑in screen and choose to sign out if possible, then sign in again with the same personal Microsoft account.
   • For many transient Windows Hello errors, Microsoft recommends: sign out → sign in again → try PIN creation again.
3. If a specific error code appears during PIN creation
   • 0x801C03EF (AIK certificate no longer valid): sign out and sign in again, then retry PIN setup.
   • 0x801C044D (authorization token does not contain device ID / unable to obtain user token):
     • First sign out and sign in again and check that the network at school allows access to Microsoft services.
     • If the device is joined to Microsoft Entra ID (school organization) and this code persists, unjoin the device from Microsoft Entra ID and rejoin, then try PIN setup again.
   • 0x801C044E (failed to receive user credentials input): sign out and sign in again, then retry.
   • 0xC00000BB (PIN or this option temporarily unavailable): the domain controller (school side) may not support this login method; use a different sign‑in method (password) and ask the school IT admin to review certificate/KDC configuration.
4. If no error code is visible
   • On the PIN error screen, look for a small “More details” or similar text that might reveal the code.
   • If there is still no code, follow the generic guidance: sign out, sign back in, and attempt PIN creation again.
5. Use another sign‑in method temporarily
   • If the PIN cannot be created, sign in with the account password instead (if that option appears) and skip Windows Hello setup for now.
   • Once signed in to the desktop, open:
     • Settings → Accounts → Sign‑in options → Windows Hello PIN
     • Try to set up the PIN from there.
6. If already had a PIN and are being asked to create it again
   • This can happen after updates or system changes. Try creating the PIN again.
   • If using an existing PIN fails later, use the “I forgot my PIN” flow described in Change or reset your PIN in Windows.
7. If still stuck in a loop and cannot reach the desktop
   • Because this is a Surface Laptop for school use, the school’s IT administrator may have policies (Microsoft Entra ID / Intune) that enforce PIN/Windows Hello. In that case, the admin may need to:
     • Check device join status in Microsoft Entra ID.
     • Review any Windows Hello for Business policies applied to student devices.
     • Remove and re‑enroll the device if the initial provisioning is corrupted.
8. If an unlisted error code appears
   • Microsoft’s guidance is to contact Microsoft Support if the error code is not in the documented list. Since Surface support has already been contacted, provide them with the exact error code shown on the PIN screen so they can escalate.

For now, the practical next steps are:

• At school, connect to a stable network that allows access to Microsoft services.
• Sign out → sign in again with the personal account.
• Carefully note any error code on the PIN screen and follow the matching mitigation above.
• If the device is managed by the school, involve the school IT admin to check Entra ID join and Windows Hello for Business policies.

References:

• Windows Hello errors during PIN creation
• Windows Hello common issues and troubleshooting tips
• Troubleshoot problems with Windows Hello on Surface
• Troubleshoot Problems Signing In to Windows