Policy

Use biometrics

Windows Hello for Business enables users to use biometric gestures, such as face and fingerprints, as an alternative to the PIN gesture. However users must still configure a PIN to use in case of failures. If you enable or do not configure this policy setting, Windows Hello for Business allows the use biometric gestures. If you disable this policy setting, Windows Hello for Business prevents the use of biometric gestures. NOTE: Disabling this policy prevents the user of biometric gestures on the device for all account types.

Policy
Pack Microsoft Windows
Category Windows Components / Windows Hello for Business
Policy ID 5b78d723e725
Internal name MSPassport_UseBiometrics

Registry

Copy registry mappings

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WinBio\Credential Provider\Domain Accounts (enabled) = 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WinBio\Credential Provider\Domain Accounts (disabled) = 0

Policy notes

Windows Hello for Business enables users to use biometric gestures, such as face and fingerprints, as an alternative to the PIN gesture. However users must still configure a PIN to use in case of failures. If you enable or do not configure this policy setting, Windows Hello for Business allows the use biometric gestures. If you disable this policy setting, Windows Hello for Business prevents the use of biometric gestures. NOTE: Disabling this policy prevents the user of biometric gestures on the device for all account types.

Related policies

Allow enumeration of emulated smart card for all usersConfigure device unlock factorsConfigure dynamic lock factorsEnable ESS with Supported PeripheralsTurn off smart card emulationUse a hardware security deviceUse certificate for on-premises authentication