Home / server / Questions / 1025596
Accepted
Paweł Zimny
Asked: 2020-07-17 23:33:51 +0800 CST

Enable Windows Hello within domain machines

  • 772

My goal is to allow users to use Windows Hello on their computers which are connected to the domain. It doesn't have to be Hello for business. At the moment users even can't see Windows Hellow section in sign in settings, for example: enter image description here

We are using Hybird AD, I've tried many combinations of settings in group policy. Right now I've got enabled options:

  • Tun on convenience PIN sign-in (in Logon settings)
  • Use Windows Hello for Business (in Hello for Business settings)
  • Use biometrics (in Hello for Business settings)
  • Use a hardware security device (in Hello for Business settings)
  • Allow the use of biometrics (in Biometrics settings)
  • Allow users to log on using biometrics (in Biometrics settings)
  • Allow domain users to log on using biometrics (in Biometrics settings)

After disconnecting machine from domain, Windows Hellow appears and works alright. Machine is runing on Windows 10 Enterprise, version 2004.

What else I can try to do to allow users to use Windows Hello (PIN, fingerprint, facial recognition)?

windows group-policy active-directory

2 Answers

  1. Best Answer

    After setting all Windows Hello for Business settings in group policy as not configured and syncing AD, everything started to work, Windows Hello is visible, possible to configure and works like a charm.

    • 2

  2. You can allso achive it with some reg keys. Those you can deploy via GPO or a PS Script. I've documentetd the way via ps1 on my Blog: https://scloud.work/de/windows-hello-aktiviert/

    Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\System" -Name "AllowDomainPINLogon" -Value 1 -Type DWORD
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork" /v Enabled /t REG_DWORD /d 1 /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork" /v DisablePostLogonProvisioning /t REG_DWORD /d 1 /f
    • 1