Policy
Use biometrics
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT
Windows Hello for Business enables users to use biometric gestures, such as face and fingerprints, as an alternative to the PIN gesture. However users must still configure a PIN to use in case of failures. If you enable or do not configure this policy setting, Windows Hello for Business allows the use biometric gestures. If you disable this policy setting, Windows Hello for Business prevents the use of biometric gestures. NOTE: Disabling this policy prevents the user of biometric gestures on the device for all account types.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WinBio\Credential Provider\Domain Accounts | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- ComputerAllow enumeration of emulated smart card for all usersAt least Windows 10
- ComputerConfigure device unlock factorsAt least Windows 10
- ComputerConfigure dynamic lock factorsAt least Windows 10
- ComputerEnable ESS with Supported PeripheralsAt least Windows 11 Version 22H2
- ComputerTurn off smart card emulationAt least Windows 10
- ComputerUse a hardware security deviceAt least Windows 10
- ComputerUse certificate for on-premises authenticationAt least Windows 10
- UserUse certificate for on-premises authenticationAt least Windows 10
- ComputerUse cloud trust for on-premises authenticationAt least Windows 10
- ComputerUse PIN RecoveryAt least Windows 10
- UserUse Windows Hello for BusinessAt least Windows 10
- ComputerUse Windows Hello for BusinessAt least Windows 10