Forum Discussion

Everartaraujo's avatar
Everartaraujo
Copper Contributor
Nov 12, 2025

Make Windows Hello the default method for admin elevation prompts?

Hi everyone,

I am trying to figure out how to set Windows Hello (Fingerprint or Face) as the default option when I'm prompted for admin elevation.

Right now, Windows always defaults to asking for the admin email and password, so I have to click "More options" and select Windows Hello manually each time.

Is there a way to make Windows Hello (Or just the pin) the default sign-in method for these prompts so I don't have to change it manually every time?

Thanks in advance

1 Reply

  • Everartaraujo​ 

    Hy,

    Unfortunately, UAC is designed to fall back to password login by default. You could try changing this behavior via the Windows Registry, but any Intune Security baseline policies will likely override local changes, which makes managing this approach more complex. I encounter the same questions in our enterprise environment.

    Fortunately, if you have configured your fingerprint, you can use it directly at the UAC prompt without needing to select the specific account. For example, when opening an elevated Terminal, you can authenticate with your fingerprint right away—no need to manually choose an account.

    Good luck!

Resources