Some domain users can use fingerprint and some not

Question

Hello, we have windows domain with organization of around 45k windows 10 clients.
In Group Policies, for the version of Windows 10.0.19042, we have Biometrics not configured (default then = allowed).
The Biometrics service is running on the clients.
However on some machines it is possible to configure fingerprint logon and on some not, with message that "these settings are managed by your organization".

What else is this dependent from?

Thank you in advance!

Michal Leder

Answer 1

Hi Michael L,

Thank you for your question.

First of all, it is always recommended to be on a more recent version of windows 10, in your case you are on version 20h2, which refers to the year 2020.

To update to the latest version you can follow the steps below:

1) Go to the link below and click Update Now that the Microsoft Update Assistant will be downloaded:

https://www.microsoft.com/en-us/software-download/windows10

2) When downloading and installing the application it will do a system check, it will start the download and finally install the new version, what you have to do is just restart the device when it asks for it.

Regarding the login options, follow the steps below:

Step 1: Open Group Policy Editor, navigate to the following setting: Computer Configuration > Administrative Templates > System > Login And enable “ Enable convenience PIN login ”.

Step 2: Add registry key below

[HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ System] - "AllowDomainPINLogon" = dword: 00000001

If the answer was helpful, please don't forget to vote up or accept as an answer, thanks.