Domain Login Fingerprint Windows 10

On the appearing window click the get started button.

Domain login fingerprint windows 10. Click sign in options on the left panel and click windows hello fingerprint on the right panel and click the set up button. Do not display last user name. Log on using other credentials or see your system administrator solution.

A convenience pin is very different to windows hello for business because unlike the more secure option it is merely a wrapper for the user s domain password. Whether or not you understand or like it microsoft has adopted a security strategy in a domain active directory environment with windows 10 that has up ended the conventional thinking on passwords and the use of a device specific pin is now considered more secure. This was written because there was a need to do this using a lenovo x1 carbon but it can be used on any windows 8 1 or windows 7 computer that uses biometrics.

If you have ever setup the fingerprint login before you will be prompted to enter your pin. There s a pretty simple fix for this but it involves editing the windows registry. When users go to the settings app to enable fingerprint and pin login the options are greyed out.

If you want to use fingerprint authentication on your windows 10 devices enter a pin required not optional. To setup a fingerprint login in windows 10 open the windows settings window clicking the gear icon on the start menu. For windows 10 users connected to a domain it seems the fingerprint unlock and pin login has stopped working.

Fingerprint logon is not enabled for domain accounts on this machine. This solution details how to enable domain user logons to a specific computer using a biometric fingerprint reader. The result of doing the enrollment above is that the users password is cached and substituted by the local system when signing in with a convenience pin.

Computer configuration windows settings security settings local policies security options. Configure the following policy to let windows 10 accept the fingerprint reader as valid method to login from outside the domain network.