Policy

Allow companion device for secondary authentication

This policy allows users to use a companion device, such as a phone, fitness band, or IoT device, to sign on to a desktop computer running Windows 10. The companion device provides a second factor of authentication with Windows Hello. If you enable or do not configure this policy setting, users can authenticate to Windows Hello using a companion device. If you disable this policy, users cannot use a companion device to authenticate with Windows Hello.

Policy
Pack Microsoft Windows
Category Windows Components / Microsoft Secondary Authentication Factor
Policy ID 5c87993d543c
Internal name MSSecondaryAuthFactor_AllowSecondaryAuthenticationDevice

Registry

Copy registry mappings

HKLM\SOFTWARE\Policies\Microsoft\SecondaryAuthenticationFactor\AllowSecondaryAuthenticationDevice (enabled) = 1
HKLM\SOFTWARE\Policies\Microsoft\SecondaryAuthenticationFactor\AllowSecondaryAuthenticationDevice (disabled) = 0

Policy notes

This policy allows users to use a companion device, such as a phone, fitness band, or IoT device, to sign on to a desktop computer running Windows 10. The companion device provides a second factor of authentication with Windows Hello. If you enable or do not configure this policy setting, users can authenticate to Windows Hello using a companion device. If you disable this policy, users cannot use a companion device to authenticate with Windows Hello.