Policy

Allow user name hint

This policy setting lets you determine whether an optional field will be displayed during logon and elevation that allows a user to enter his or her user name or user name and domain, thereby associating a certificate with that user. If you enable this policy setting then an optional field that allows a user to enter their user name or user name and domain will be displayed. If you disable or do not configure this policy setting, an optional field that allows users to enter their user name or user name and domain will not be displayed.

Policy
PackMicrosoft Windows
CategoryWindows Components / Smart Card
Policy ID67e92e02777b
Internal nameX509HintsNeeded

Registry

Copy registry mappings

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider\X509HintsNeeded (enabled) = 1
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider\X509HintsNeeded (disabled) = 0

Policy notes

This policy setting lets you determine whether an optional field will be displayed during logon and elevation that allows a user to enter his or her user name or user name and domain, thereby associating a certificate with that user. If you enable this policy setting then an optional field that allows a user to enter their user name or user name and domain will be displayed. If you disable or do not configure this policy setting, an optional field that allows users to enter their user name or user name and domain will not be displayed.

Related policies

Allow certificates with no extended key usage certificate attributeAllow ECC certificates to be used for logon and authenticationAllow Integrated Unblock screen to be displayed at the time of logonAllow signature keys valid for LogonAllow time invalid certificatesConfigure root certificate clean upDisplay string when smart card is blocked