Windows Hello Unavailable for Domain Managed Account but working for local account

Question

Hello,

we got a Surface in the domain and the customer want to use the Windows Hello function for authentication. Locally no problem, but within the domain, the Hello doesn't work. It's outgrayed so I can't do anything with it.

In the GPO is nothing changed, so the default configuration für windows hello should work (what I read, that default is to allow windows hello)

Any Suggestions or help?

I would be appreciated

Sincerely,

Tu

Answer 1

Hello,

I recommend you go to the following path in the Registry Editor:

"Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System"

Add a new registry (if it does not exist):

Type: DWORD (32-bit)

Name: AllowDomainPINLogon

Value: 1

Then restart your computer.

https://learn.microsoft.com/en-us/archive/msdn-technet-forums/74e3c3e8-1f47-4940-960c-c54cc98e82dd

Note If you modify the registry incorrectly, you can cause serious problems. Therefore, follow these steps carefully. For additional protection, back up the registry before you modify it. For more information about how to back up and restore the registry, see How to back up and restore the registry in Windows.

Best Regards,

Zunhui

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.