SOLVED

Windows Hello for Business

%3CLINGO-SUB%20id%3D%22lingo-sub-1734505%22%20slang%3D%22en-US%22%3EWindows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1734505%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20trying%20to%20enable%20the%20feature%20for%20our%20domain%20since%20we%20recently%20purchased%20laptops%20with%20fingerprint%20reader.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20found%26nbsp%3B%20the%20template%20but%20when%20enabling%20the%20windows%20hello%20for%20business%20it%20does%20not%20seem%20to%20do%20anything%20on%20our%20laptops.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20still%20see%20it%20disabled.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20anything%20I'm%20missing%20on%20the%20GPO%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1734505%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1735014%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1735014%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F816397%22%20target%3D%22_blank%22%3E%40seyah96%3C%2FA%3E%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECould%20you%20create%20a%20registry%20record%20with%20Group%20Policy%20and%20apply%20the%20polic%20to%20the%20OU%20where%20the%20computers%20are%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECreate%20New%20Policy%20and%20edit%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EComputer%20Configuration%20-%26gt%3B%20Preferences%20-%26gt%3B%20Windows%20Settings%20-%26gt%3B%20Right%20Click%20to%20Registry%20-%26gt%3B%20New%20-%26gt%3B%20Registry%20Item%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAction%20%3A%20Create%3C%2FP%3E%3CP%3EHive%20%3A%20HKEY_LOCAL_MACHINE%3CBR%20%2F%3EKey%20Path%20%3A%20SOFTWARE%5CPolicies%5CMicrosoft%5CWindows%5CSystem%3CBR%20%2F%3EValue%20name%20%3A%20AllowDomainPINLogon%3CBR%20%2F%3EValue%20Type%20%3A%20REG_DWORD%3CBR%20%2F%3EBase%20%3A%20Decimal%3CBR%20%2F%3EValue%20Data%20%3A%201%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1736177%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1736177%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F778023%22%20target%3D%22_blank%22%3E%40hasanemresatilmis%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20should%20create%20this%20reg%20entry%20along%20with%20enabling%20Windows%20hello%20for%20business%20under%20Administrative%20templates%3F%20Or%20just%20creating%20this%20reg%20entry%20will%20do%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethanks!%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1736260%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1736260%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F816397%22%20target%3D%22_blank%22%3E%40seyah96%3C%2FA%3E%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20think%20it's%20just%20enough%20to%20create%20the%20reg%20key.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECould%20you%20tell%20me%20or%20send%20a%20snapshot%20what%20configurations%20are%20in%20the%20Administrative%20Template%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hello,

 

I was trying to enable the feature for our domain since we recently purchased laptops with fingerprint reader.

 

I found  the template but when enabling the windows hello for business it does not seem to do anything on our laptops. 

 

I still see it disabled. 

 

Is there anything I'm missing on the GPO?

 

Thanks! 

7 Replies
Highlighted
Best Response confirmed by seyah96 (Occasional Contributor)
Solution

 

Hi @seyah96,

 

Could you create a registry record with Group Policy and apply the policy to the OU where the computers are?

 

Create New Policy and edit

 

Computer Configuration -> Preferences -> Windows Settings -> Right Click to Registry -> New -> Registry Item

 

Action : Create

Hive : HKEY_LOCAL_MACHINE
Key Path : SOFTWARE\Policies\Microsoft\Windows\System
Value name : AllowDomainPINLogon
Value type : REG_DWORD
Value data : 00000001

Base : Hexadecimal

Highlighted

@hasanemresatilmis 

 

I should create this reg entry along with enabling Windows hello for business under Administrative templates? Or just creating this reg entry will do?

 

thanks! 

Highlighted

 

Hi @seyah96,

 

I think it's just enough to create the reg key.

 

Could you tell me or send a snapshot what configurations are in the Administrative Template?

Highlighted

@hasanemresatilmis 

 

Here's what's under computer policy>admin templates>Windows Hello for Business 

 

The settings does not seem to work though 

 

seyah96_1-1601575833656.png

 

Highlighted

 

Hi @seyah96,

 

Could you set all configurations here to "Not configured" and apply only the policy that create the Reg key?

Highlighted

@hasanemresatilmis 

 

Wow! That worked! 

Thank you! 

Highlighted

 

Hi @seyah96,

 

You're welcome. I'm so glad it worked :)