Bug report: "Disable User Account Control (UAC)" causing Windows PIN to misbehave

[RustyRouter]

Hello,

Just wanted to report my findings
From the default form page and enabling 2 options only

1-Disable User Account Control (UAC)
2-Add a Microsoft (“online”) user account interactively during Windows Setup

everything else is untouched , tested on Win11_24H2_English_x64.iso

During windows setup and after signing-in with an online account , setup will ask to create a PIN:

the pin window does not appear:

pressing Alt+Tab will show that the PIN window is actually there:

to complete the setup blindly type a PIN press Tab then type the PIN again then press enter, Windows will continue the setup

Now every time Windows asking for a PIN it will appear behind, something called "Credential Manager UI Host" will show in the task bar

Here is a screenshot of how the Windows Hello PIN supposed to appear:

finally I wanted to thank you for creating the autounattend.xml form page :)
I hope there is a solution for this issue or at least a warning next to "Disable User Account Control (UAC)"

Edit: the issue is there even if you select only 1 option on the autounattend.xml form which is:
Disable User Account Control (UAC)
it will make the Windows Hello PIN pop up window always behind any other window

[cschneegans]

Thanks for your report! I think I have seen this issue before, but never bothered to investigate thoroughly.

For future reference, C:\Windows\System32\CredentialUIBroker.exe is the process responsible for showing the Windows Hello PIN dialog.

Also, I realized just now that you can use a PIN with a local user account. This is probably not a very typical setup, though.

I have now added a warning and linked this page:

[cschneegans]

Also, I realized just now that you can use a PIN with a local user account.

At the risk of making a fool my myself, I now realize that adding a PIN to a local user account also lets you use Passkeys with that account in Windows 11. Until now, I was under the impression that Passkeys only work with a Microsoft account.

[RustyRouter]

No worries, I thought the same also, I was trying to figure out the PIN issue and realized that you can add a PIN to a local account, but the question is, why disabling UAC breaks the PIN window ? I guess we will never know.