Event details

Have a question about Windows 11, device management, security, updates, or modern endpoint operations? This hour is dedicated entirely to your questions. Bring what's top of mind—from Windows 11 adop...
Heather_Poulsen
Updated Jul 07, 2026
Office Hours
Dom_Cote's avatar
Dom_Cote
Iron Contributor
Jul 16, 2026

Is there an MDM CSP by now that lets us enable Windows Hello Face Login Anti Spoof?
For the longest time, we needed to deploy a script to set a reg key. 

Joe_Lurie's avatar
Joe_Lurie
Icon for Microsoft rankMicrosoft
Jul 16, 2026

Dom_Cote​ Yes, I believe you can manage this through the PassportForWork CSP rather than a custom reg-key script. The anti-spoofing control lives under: 

 .../Biometrics/FacialFeaturesUseEnhancedAntiSpoofing

...which you can push via a Settings Catalog profile (search "enhanced anti-spoofing") or an OMA-URI custom policy.

CSP reference: https://learn.microsoft.com/windows/client-management/mdm/passportforwork-csp