I want to enable picture logon to domain-joined Windows 8.1. However in Settings > Accounts > Sign-in options, there is no option for that, but unhelpful "Some settings are managed by your system administrator".
Setting "Turn off picture password sign-in" to Disabled didn't help (I've rebooted and verified gpresult which looks ok).
Any suggestions why it would be disabled, please?
It doesn't seem possible to enable it via RDP. Real shame that is not mentioned nowhere in UI or documentation!
We use VMs extensively and typically RDP to them it never occurred to me that could be the problem...
Disable "Interactive logon: Do not display last user name" in your AD GPO as well.