See this post for the resolution to the issue. The restart is mandatory.įor step 3: I already had that key defined, but I've deleted it and added it again.Īlso, I had the following settings enabled: "Administrative Templates - Window Components - Biometrics - Allow the use of biometrics" and "Administrative Templates - Window Components - Biometrics - Allow domain users to log on using biometrics".ĭon't know if they make a difference or not though. Restart and then Finger print setup is available! Run - regedit - create a Dword32 key - AllowDoaminPINLogon - set value = 1 In gpedit: Administrative Templates - System - Logon - Enable "Turn on convenience PIN sign in"ģ. Run - gpedit.msc - Administrative Templates - Windows Component - Windows hello for businessĢ. Set 3 policy: Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business in "not configured" I have gg and tried these steps with my Dell Vostro - using Wins 10 pro - configured by a Domain in my companyġ. BTW will gpudate /force return most values to the AD defaults, or do the defaults vary with the version, 1609, 1703, 1709, etc? Problem is we had tried all the group-policyĬrap first, and I'm not sure I cleaned it all out. However, it may have been updated from 1703 to 1709 instead of a fresh install.
You may also need to update driver, or remove and let it re-add itself.Ĭarbon X5 Model 20HQS23W00 (fresh install of 1709)įor another laptop identical to 3 I'm still having problems: fp ok for local user, but not ad user.
That is, after doing *only* the above registry-hack and changing nothing in group-policy, all AD users could now add fingerprint and pin ( had to add pin for fingerprint to work). Did only: Windows Registry Editor Version 5.00 On all of the following 3 laptops fingerprint was grayed-out.