Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Sunday, November 19, 2017 5:48 AM
Hi,
After joining windows 10 1709 machine to domain, I'm unable to configure windows hello because it's grayed out.
I configured all the settings of Biometrics and Windows Hello for business through group policy and didn't solve the issue, also I added one required registry key ( DWord key with value 2 ) and still the same.
Kindly advise.
Regards,
Khodr.
All replies (5)
Monday, November 20, 2017 12:16 AM
Please run "gpresult /h >C:\gpresult.html" to check whether there is a related GPO has been deployed to the machine.
We could also try to remove the machine from the domain to have a test.
S.Sengupta,Microsoft MVP Windows and Devices for IT, Windows Insider MVP
Monday, November 20, 2017 4:06 AM
Hello,
See if this fix helps you:
https://www.kapilarya.com/fix-pin-not-working-in-windows-10
Let us know if this helps!
Microsoft MVP (Windows and Devices for IT)
Windows Insider MVP
Windows Help & Support [www.kapilarya.com]
Monday, November 20, 2017 8:48 AM
Hi Khodr,
Windows 10 Version 1607 and later includes new functionality that differentiates Windows Hello for Business from a convenience sign-in PIN.
Windows Hello for Business has strong user authentication properties that are frequently and mistakenly assumed to be functioning when the Windows Hello for Business infrastructure is not in place and when a user is using a convenience PIN. This change prevents the creation of a PIN in Windows 10 and later version without Windows Hello for Business.
To use a convenience PIN in Windows 10 Version 1607 or later, the following Group Policy setting must be configured:
Policy: Turn on convenience PIN sign-in
Category: Path Computer Configuration\Administrative Templates\System\Logon
For more information, please read this official document:
Can't configure a PIN when Convenience PIN and Hello for Business policies are enabled in Windows 10
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Wednesday, November 22, 2017 9:52 AM
Hi,
Was your issue resolved?
If yes, please mark the helpful reply as answer in order that other community members could find the helpful reply quickly.
If no, please reply and tell us the current situation in order to provide further help.
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Monday, January 8, 2018 10:37 AM
Hi All,
One of my Windows 10 clients needs to use PIN, face recognition and fingerprint. The problem is that all of these are disabled when i join the specific PC to the domain. With the local account work properly.
I did also the following changes that i found after a long day of searching.
- Checked that group policy applies properly - DONE
- Downloaded and installed administrative templates to view "Windows Hello" in my group policy tree - DONE
- Enable SERVER 2008 R2 use of biometrics in Administrative Templates - Windows Components - Windows Hello for Business - DONE
- Enable WINDOWS 10 PRO REGISTRY KEY Computer Configuration->Administrative Templates->System->Logon - and disabled "Turn on convenience PIN sign-in with value 1 - DONE
Currently, PIN is disabled/greyed out with " Something went wrong" red letters".
Any help will be highly appreciated since i already spend a lot of hours on this issue and i am out of ideas. :(
Avgoustinos
Avgoustinos