Policy

Turn off picture password sign-in

This policy setting allows you to control whether a domain user can sign in using a picture password. If you enable this policy setting, a domain user can't set up or sign in with a picture password. If you disable or don't configure this policy setting, a domain user can set up and use a picture password. Note that the user's domain password will be cached in the system vault when using this feature.

Policy
Pack Microsoft Windows
Category System / Logon
Policy ID 41e47c9d949a
Internal name BlockDomainPicturePassword

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\System\BlockDomainPicturePassword (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\System\BlockDomainPicturePassword (disabled) = 0

Policy notes

This policy setting allows you to control whether a domain user can sign in using a picture password. If you enable this policy setting, a domain user can't set up or sign in with a picture password. If you disable or don't configure this policy setting, a domain user can set up and use a picture password. Note that the user's domain password will be cached in the system vault when using this feature.

Related policies

Allow users to select when a password is required when resuming from connected standbyAlways use classic logonAlways use custom logon backgroundAlways wait for the network at computer startup and logonAssign a default credential providerAssign a default domain for logonBlock user from showing account details on sign-in