Enable Windows Hello on Domain Joined PCs
Can’t configure a convenience PIN - Windows Client
Describes an issue that prevents users of Windows 10 Anniversary Update from setting a convenience PIN. This change involves Windows Hello for Business and the increased security this feature offers. A resolution is provided.
Make sure the only registry values that are configured are enable convenience pin sign in. If any other Windows Hello settings are enabled, the feature will not be enabled or available to any domain joined PCs. Check all GPOs to see what is applying those settings (gpresult /v) if it is deployed in group policy.