Hero Banner

Feedback & Support Discussions

Reply
Visitor 1

Windows 10 (1903) Hello

I have a client that we just purchased a new Dell Latitude 5591 that has a camera and finger printer reader that are supposed to be compatible with Hello.

When I go to the Hello setup (Sign-in Options) I see the red "some of these settings are hidden or managed by your organization" (it's connected to a 2008R2 domain that has the update ADMs). 

Hello Face, Fingerprint and PIN all say "This option is currently unavailable"

I have already updated the domain GPO so that Windows Hello for Business has use biometrics turned on and use windows hello for business is turned on. The Logon policy also has the convenience pin turned on as well.

 

Any suggestions?

1 REPLY 1
Microsoft

Re: Windows 10 (1903) Hello

First idea would be to disable the convenience PIN GPO, I remember there where some issues when both WHfB and convenience PIN is enabled.

See also https://support.microsoft.com/en-us/help/3201940/can-t-configure-a-pin-when-convenience-pin-and-hello-for-business-poli

 

It is also not required for Hello for Business setup - e.g. here are required GPOs https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-key-trust-policy-settings#other-related-group-policy-settings

Any info in event log that WHfB registration was successful? https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-event-300

 

Also - there are quite a few more technical experts available in the technical communities: https://techcommunity.microsoft.com/t5/Windows-10/bd-p/Windows10space