Is it possible to disallow the first login after reboot/power on via Windows Hello?

Oleksandr Romaniuk 465 Reputation points
2024-03-23T13:59:38.77+00:00
  1. Is it possible to disallow the first login after reboot/power on via Windows Hello? (we want to configure the first login via password and then allow using of Windows Hello during the session)
  2. Is it possible to configure only a specific type of biometric for Windows Hello, for example, only a fingerprint?
Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,649 questions
Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,767 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,757 questions
Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
8,206 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Wesley Li 5,040 Reputation points
    2024-03-25T07:40:43.53+00:00

    Hello

    Yes, it is possible to configure Windows Hello to meet your requirements. Here are the steps:

     

    Disallow First Login After Reboot/Power On via Windows Hello:

    1.Open the Run dialog box by pressing the Windows key and the R key together.

    2.Type gpedit.msc and hit Enter to open the Local Group Policy Editor.

    3.Navigate to Computer Configuration -> Administrative Templates -> System -> Logon.

    4.Double click on Turn on PIN sign-in and select Disabled.

    5.Similarly, disable the other Windows Hello options if any.

    6.Exit the Group policy editor and reboot the computer.

     

    Configure Only a Specific Type of Biometric for Windows Hello:

    1.Go to Start > Settings > Accounts > Sign-in options.

    2.Under Ways to sign in, you’ll see three choices to sign in with Windows Hello: Facial recognition, Fingerprint, and PIN.

    3.Select the Windows Hello method you want to remove and click Remove.

    4.To enable a specific biometric method, select it and follow the prompts to set it up.

     

    Always remember to create a system restore point before making changes to your system settings.