I would suggest to enable the Winows Hello Services for the local Administrators.
If not enabled by design, you could add a key in the registry that is optional, but still available.
Even if it is a security threat, it's the user that should be able to decide.
That's all. My only wish, currently.
Francesco De Nuccio