Some of the settings are hoidden by Organization.

Question

Hi Support,

I have windows 11 Professional Operating System.

I have configured the User's account in Active directory so that user should not change the password in their system.If user forgotten the password,we will change the user password /reset in Active Directory of Windows Server 2016.

Some of the systems are having finger print option and we are not able to apply it due to the user accounts are configured in Windows active directory server.

How to enable or set-up finger print in user's account.

The screenshot for your reference.

Looking forward for your immeduate reply at the earliest.

Thanks
Pradeep.R

Answer 1

Hello Pradeep.R,

You should see options to edit these settings in your Active Directory GPO center.

If you don't see them, maybe you should update your GPO central Store with your newest W10 OS version :

https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store

Regards.

JG

Answer 2

Hello,

If you want to disable PIN for your clients, you can do this using registry. Try these steps:

-Open Registry Editor.
-Go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System.
-Set AllowDomainPINLogon to 0.
-Close Registry Editor and reboot your system.

Let us know if this helps!

Answer 3

Hello @Pradeep R

You can follow the next reference article to guide you in the policy configuration for Enable Windows Hello for Business

Reference: https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-cert-trust-policy-settings#create-the-windows-hello-for-business-group-policy-object

For more specific settings about Windows Hello policies, please check https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-manage-in-organization

Hope this helps with your query,

--
--If the reply is helpful, please Upvote and Accept as answer-