Do domain users need to enroll their fingerprints on every PC that they wish to logon to?

Question

Hi all,

Scenario : There are two domain PC's running Windows 10 ... one belongs to John and the other to Harry. John and Harry have successfully configured there own PC's for fingerprint logins. However, when Harry tries to logon to John's PC, Harry is not presented with fingerprint logon option. The same happens when John tries to logon to Harry's PC

Comment : I was under the impression that fingerprints are stored at the domain level and not at the PC level. This does not seem top be the case.

Question : Does every domain user who needs access to a particular domain PC have to register their fingerprints on that same domain PC ??. In other words, using the above example, do John and Harry have to register their fingerprints on both PC's?

Regards
MIke

Answer 1

Hello,

Thank you for posting in our TechNet forum.

It is suggested that we could try the below steps to check whether it could be successfully or not.

Enable the Group Policy Computer Configuration\Polices\Administrative Templates\System\Logon\Turn on convenience PIN sign-in

Enable the Group Policy Computer configuration\Policies\Administrative Templates\Windows Components\Biometric\Allow domain users to log on using biometrics

Add Reg Key [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] – “AllowDomainPINLogon"=dword:00000001

Here is the similar case, we could kindly have a check for reference.

https://social.technet.microsoft.com/Forums/en-US/43d7b16b-7ba2-479f-af8b-0d3db2ec60c7/windows-10-enable-fingerprint-on-domain-account?forum=win10itprosecurity

Best Regards,
Wesley Li

Answer 2

Hello,

Do you have any other questions?

How is the current issue going?

Thanks.