Turn off smart card emulation

Supported OS tags: Windows10, Windows10RT

Windows Hello for Business automatically provides smart card emulation for compatibility with smart card enabled applications. If you enable this policy setting, Windows Hello for Business provisions Windows Hello for Business credentials that are not compatible with smart card applications. If you disable or do not configure this policy setting, Windows Hello for Business provisions Windows Hello for Business credentials compatible with smart card applications. NOTE: This policy affects Windows Hello for Business credentials at the time of creation. Credentials created before the application of this policy continue to provide smart card emulation. To change an existing credential, enable this policy setting and select "I forgot my PIN" from Settings.

This policy has no additional user input fields.

• Computer
  Allow enumeration of emulated smart card for all users

  At least Windows 10
• Computer
  Configure device unlock factors

  At least Windows 10
• Computer
  Configure dynamic lock factors

  At least Windows 10
• Computer
  Enable ESS with Supported Peripherals

  At least Windows 11 Version 22H2
• Computer
  Use a hardware security device

  At least Windows 10
• Computer
  Use biometrics

  At least Windows 10
• Computer
  Use certificate for on-premises authentication

  At least Windows 10
• User
  Use certificate for on-premises authentication

  At least Windows 10
• Computer
  Use cloud trust for on-premises authentication

  At least Windows 10
• Computer
  Use PIN Recovery

  At least Windows 10
• User
  Use Windows Hello for Business

  At least Windows 10
• Computer
  Use Windows Hello for Business

  At least Windows 10