Shulou(Shulou.com)06/02 Report--

As we all know, Surface has its own biometric (face recognition) since Win8: Windows Hello!

Some users reported that after Win10 joined the enterprise domain environment, Windows Hello could not be enabled. Hint: some settings are managed by your organization!

You can see that both Windows Hello/ and PIN are gray and unavailable!

At this point, you need to manually modify the registry to add the following:

[HKEY_LOCAL_MACHINE\ SOFTWARE\ Policies\ Microsoft\ Windows\ System]

"AllowDomainPINLogon" = dword:00000001

After you add it, and then enter the settings, you can see that the two option buttons have changed from gray to usable!

Cause analysis:

Because PIN login is enabled, in the corresponding group policy, as follows:

Let's take a closer look at the group policy description: only support more than 2012 servers and more than Win8 client operating systems!

Because the computer joins the domain environment is Windows2008R2, does not support this policy, so this feature is disabled by default, the following is the group policy in the Windows2008R2 domain control, can not find this option!

So for this environment, if you want to use this feature, you must manually modify the registry, please COPY the following to notepad, save as .reg, import!

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\ SOFTWARE\ Policies\ Microsoft\ Windows\ System]

"AllowDomainPINLogon" = dword:00000001

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.