Enable or Disable Windows Hello Biometrics in Windows 10
Windows Hello biometrics lets you sign in to your devices, apps, online services, and networks using your face, iris, or fingerprint.
For more information about Windows Hello biometrics, see:
This tutorial will show you how to enable or disable the use of biometrics for all users in Windows 10.
You must be signed in as an administrator to enable or disable the use of biometrics.
- Enable or Disable Use of Windows Hello Biometrics in Local Group Policy Editor Enable or Disable Use of Windows Hello Biometrics using a REG file
EXAMPLE: Windows Hello biometrics enabled and disabled in Settings
Enable or Disable Use of Windows Hello Biometrics in Local Group Policy Editor
The Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.
All editions can use Option Two below.
2 In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)
Computer Configuration\Administrative Templates\Windows Components\Biometrics
3 In the right pane of Biometrics in Local Group Policy Editor, double click/tap on the Allow the use of biometrics policy to edit it. (see screenshot above)
4 Do step 5 (enable) or step 6 (disable) below for what you would like to do.
A) Select (dot) Not Configured or Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)
Not Configured is the default setting.
A) Select (dot) Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)
7 When finished, you can close the Local Group Policy Editor.
Enable or Disable Use of Windows Hello Biometrics using a REG file
The downloadable .reg files below will add and modify the DWORD value in the registry key below.
Enabled DWORD
0 = Disable
(delete) = Enable
1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.
This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Enable_Windows_Hello_Biometrics.reg
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Disable_Windows_Hello_Biometrics.reg
4 Save the .reg file to your desktop.
5 Double click/tap on the downloaded .reg file to merge it.
6 When prompted, click/tap on Run, OK (UAC), Yes, and OK to approve the merge.
Hello BBop, and welcome to Ten Forums.
Just to verify, are you able to scroll up and down any in the right pane to see if these settings may be available?
Do you have any Windows Hello devices (ex: IR camera, fingerprint reader, etc. ) connected with updated drivers to use Windows Hello?
If that’s not the issue, then please go ahead and post a screenshot showing this to see if anything may stand out as a cause.
Computer Type: PC/Desktop
System Manufacturer/Model Number: Custom self built
OS: 64-bit Windows 11 Pro for Workstations
CPU: Intel i7-8700K 5 GHz
Motherboard: ASUS ROG Maximus XI Formula Z390
Memory: 16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
Graphics Card: ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
Sound Card: Integrated Digital Audio (S/PDIF)
Monitor(s) Displays: 2 x Samsung Odyssey G75 27"
Screen Resolution: 2560×1440
Keyboard: Logitech wireless K800
Mouse: Logitech MX Master 3
PSU: Seasonic Prime Titanium 850W
Case: Thermaltake Core P3 wall mounted
Cooling: Corsair Hydro H115i
Hard Drives: 1TB Samsung 980 PRO M.2, 1TB Samsung 970 EVO Plus M.2, 6TB WD Black WD6001FZWX 8TB WD MyCloudEX2Ultra NAS
Internet Speed: 1 Gbps Download and 35 Mbps Upload
Browser: Google Chrome
Antivirus: Windows Defender and Malwarebytes Premium
Other Info: Logitech Z625 speaker system, Logitech BRIO 4K Pro webcam, HP Color LaserJet Pro MFP M477fdn, Linksys EA9500 router, Motorola MB8611 cable modem, APC SMART-UPS RT 1000 XL — SURT1000XLI, Galaxy S20 Ultra 5G phone
Hi Brink,
Thank you so much for the quick reply. I must say I am pretty perplexed right now. Tried changing the registry, settings for enabling the fingerprint reader, updating windows, and many restarts. In the attemp to install the driver from lenovo I encounter an error saying I must enable the fingerprint (which I have and is enavled) — All through different guides in the tenforum. Please see attaced picture.
Ps. I have other issues as well such as permissions and other apps not working at all (such as Paint and the store *so far) ***Update — seems like none of the native win10 apps work really. They all load and then shutoff. Maybe I should just go with the inevitable and reinstall windows?![]()
Using Windows Biometric Framework (WBF) and Your Fingerprint to Log into Windows 7/8/8.1/10
Biometrics technology is a widely used technology for identification and verification. It provides convenient access to systems, services and resources. Biometric technology is based on measuring the unchanging physical characteristics of an individual to uniquely identify that person. Fingerprint recognition is the oldest and the most deployed biometric recognition technique. It is one of the most economical biometric PC user authentication techniques and has a very high accuracy rate. Millions of fingerprint biometric devices are now embedded in personal computers and peripherals.
Contents
What is Windows Biometric Framework?
The Windows Biometric Framework (WBF) comprises of a set of services and interfaces which support the consistent development and management of biometric devices such as fingerprint readers. It also enhances the reliability and compatibility with biometric services and drivers and allows device developers to interact with the client side of the framework that supports each biometric solution.
The Windows Biometric Service is a part of the WBF and enables client applications to capture, compare, manipulate, and store biometric data without having direct access to the biometric hardware or samples. The Windows Biometric Service runs in the security context of Local System and is hosted in a privileged SVCHOST process.
Why is the Windows Biometric Framework important?
In order to use fingerprint recognition technology in devices having versions earlier than Windows 7, fingerprint device vendors were required to provide their own USB drivers, SDKs and applications. This resulted in a variety of proprietary solutions lacking a homogeneous user experience and a common management platform for all fingerprint biometric devices which complicated the process of applying fingerprint recognition products in Windows.
The solution to this was the Windows Biometric Framework introduced in Windows 7. This framework supports fingerprint recognition products through a new set of components and provides a common management platform for different fingerprint recognition products thus enhancing the quality, reliability and consistency of the customers’ user experience while using fingerprint recognition products.
Applications of Windows Biometric Framework
Some of the practical applications of WBF are listed below:
- A biometric device item on the control panel – It allows users to manage device settings.
- Device Manager – It allows users to troubleshoot biometric fingerprint devices and manage biometric device drivers.
- Credential support – Allows to log on to a local computer or domain using biometric data and then elevate the privileges through User Account Control (UAC)
It also provides Group Policy Settings for enabling, disabling or limiting the biometric data usage for a local computer or domain.
Download the WBF Driver
- Supported Devices: Hamster Plus, Hamster IV, Hamster, Hamster Pro, Hamster Pro 20 etc.
- Supported OS: Windows 10, 8.1, 8, 7, Windows Server 2012 & Windows Server 2008 R2
Downloads
Supported Fingerprint Scanners & Modules
SecuGen Hamster Plus (HSDU03P)
SecuGen Hamster IV (HSDU04P)
SecuGen Hamster Pro 20 (HU20)
SecuGen Hamster Pro
How to Setup Fingerprint Login on Windows 7/8/8.1/10
In the guide below we show how to Setup fingerprint Login using a Secugen fingerprint Scanner. This works with Hamster Plus, Hamster IV, Hamster, Hamster Pro, Hamster Pro 20 etc.
Installing the WBF Driver
Pre-requisite: Your computer must be connected to the internet during installation.
Steps:
- Plug in the fingerprint reader to your computer. When the fingerprint reader is plugged in the first time, the WBF driver will be automatically downloaded from the Microsoft Windows Update Website and installed by Windows. Otherwise, you can also download it from the fingerprint reader’s website.
- If the above message is displayed, click Install this driver software anyway to go ahead with the installation.
- If any other non-WBF device drivers were installed on your PC previously, you must install those device drivers before installing the WBF driver. Go to Control Panel and open Device Manager. Go to Biometric Devices and right-click the non-WBF device to select it. Then click Uninstall. Make sure that the option Delete the driver software for this device is selected during uninstallation. After the uninstallation finishes, unplug the fingerprint reader and then plug it again into the PC. At this point, the WBF driver and installation should start automatically.
Installing the Fingerprint Management Application (FMA)
For Windows 8.1 Users:
Windows 8.1 users are not required to install the FMA software as it is already built into Windows 8.1 OS. Proceed directly to the section – HOW TO ENROLL FINGERPRINTS AND LOGIN TO WINDOWS 8.1
For other windows OS Users:
All other Windows users need to install the Fingerprint Management Application software which allows them to register and manage fingerprints.
Double-click the FMA software installation file. This will start the installation.
After successful installation of the FMA software, you will be able to see your fingerprint device reader in the Biometric Devices Control Panel as shown below.
How to Enroll Fingerprints and Login to Windows 7, 8
- On Windows 7 and 8, you can use the Fingerprint Management Application to enrol and delete fingers associated with your Windows account and it can be accessed from the Biometric Devices Control Panel. Go to Hardware and Sound and click on Biometric Devices. Then click Use your fingerprint with Windows.
On the following window shown below, click Continue.
- In the FMA window, click on the white tip of a finger to select the finger for enrollment.
- Then place your selected finger on the reader. When asked by the FMA, release and then press your finger again. This should be done for a total of three scans to ensure proper enrollment of your finger.
- After successful enrollment, close the FMA window or select another finger to enroll.
Note: A successful enrollment is indicated by the green colored tip of the enrolled finger. You can also delete an already-enrolled finger by clicking on the green tip. It is also possible to re-enroll a finger after deleting it.
- You can open the FMA window again by clicking on Manage your fingerprint data from the Biometric Devices Control Panel as shown below.
- Biometrics should be turned ON in order to use fingerprint login. If the WBF driver has been properly installed, biometrics should be turned on by default. You can change biometric settings from the Biometric Devices Control Panel as shown in the above figure.
- You can control fingerprint login to Windows by selecting Biometrics on or Biometrics off from the Change Biometric Settings window. After selecting Biometrics on, make sure that you have checked the box Allow users to log on to Windows using their fingerprints. Click on Save Changes.
- When you try to login to Windows for the first time using your fingerprint, you will be required to enter your current password. This allows Windows to verify your account information before enabling fingerprint login. For successive logins, you don’t need to enter your password and you can login simply with your fingerprint.
How to Enroll Fingerprints and Login to Windows 8.1, 10
- In Windows 8.1, you can enroll and manage fingerprints through Account Settings. Move your mouse pointer all the way to the upper-right or the lower-right corner of the screen until the Charms bar appears. Then click on Settings at the lower-right corner of the screen.
- Click on Change PC settings at the bottom of the Settings bar.
Alternatively, you can also search for PC settings using the Search function from the Charms bar.
- Select Accounts from the PC settings screen.
- Select Sign-in options from the Accounts screen. Fingerprint should be listed in the options. To add fingerprint to your account, click on Add under Fingerprint.
- Before accepting your fingerprint, Windows will ask for your password.
- Place your finger on the fingerprint reader. The same finger will be scanned several times to ensure proper enrollment. Proceed as per the prompts on the screen.
- After successful fingerprint scanning of one finger, click on Finish to save the scanned fingerprint to your account.
- You can add more fingerprints by clicking on Add another under Fingerprint.
- You will need to verify your account using your fingerprint. Alternatively, you can verify by clicking on Choose another option.
- Repeat steps 6 and 7 to add another fingerprint.
- To avoid duplication, Windows compares any newly added fingerprint to all registered fingerprints on your PC. An error will be displayed if you try to add a previously-registered finger.
- You can now use any of your registered fingerprints to login to Windows or access the Windows app store.
- You can remove registered fingers by clicking Remove all from the Sign-in options screen. You need to be careful with this option as it will delete all registered fingerprints at one time.
Strengths and Weaknesses of “Windows Fingerprint Login”
Strengths and Opportunities
Windows fingerprint login is implemented in PCs using the WBF and is a remarkable evolution in biometrics security. Fingerprint biometrics solution is the most real-time authentication available and its integration within Windows OS is helping enterprises deploy fingerprint authentication technology on a larger scale.
The WBF was initially implemented on Windows 7 and Windows Server 2008 R2 and now it’s available on all Windows OS. WBF provides a common-management platform for all fingerprint readers thus creating a mass-market opportunity and making biometrics solution quite easily available to consumers.
Prior to the implementation of integrated Windows fingerprint login using WBF, different fingerprint readers had its own set of proprietary solutions leading to increased cost, incompatibility issues and reduced user satisfaction. Windows integrated fingerprint login through WBF has been able to overcome all these disadvantages by providing a standard platform for fingerprint readers leading to a consistent user experience. This has also improved the scalability and availability of this biometric technology.
In Windows 8.1 fingerprint authentication is better integrated into the OS enabling users to easily set up fingerprint-scanning devices and take advantage of fingerprint-based authentication. Users can now access Windows store and purchase apps using fingerprint authentication. The only requirement for this is the Microsoft account authorizing the transaction should be associated with the Windows user on the PC where the transaction is being performed.
Windows 8.1 users can also establish a remote desktop connection using fingerprint-based authentication.
Privacy concerns have also been taken care of in Windows fingerprint login. When a fingerprint is scanned, only the distinct features of the fingerprint are identified, processed and stored as a template. This template does not contain enough data to reproduce the fingerprint image. Thus it provides an extremely secure user authentication method.
Windows fingerprint login provides the ability to enroll multiple fingers. If there is a problem with one finger, still there are 9 fingers with which the fingerprint technology can be used.
It is a proven fact that fingerprint recognition technology has a high level of accuracy and can reach nearly 100% recognition rate in good quality images.
Weaknesses and threats
It is difficult but not impossible to steal a fingerprint. That being said, it is quite possible that criminals might find a way to steal fingerprints and deceive the fingerprint scanner. An intruder can acquire the fingerprint impressions lifted from some other surface like a drinking glass and use these prints to login to the device. Criminals can even cut off someone’s finger for the print and then access the device.
If intruder gains access to the user’s device using the above methods, there could a serious loss of data and the intruder can steal the user’s identity and commit frauds with the stolen identity.
The fingerprint reader needed for fingerprint capture is not yet present on desktops unlike embedded microphones for voice recognition.
The fingerprint scanner might not be able to enroll some users due to poor quality of fingerprints, mostly encountered in the elderly and manual workers.
Conclusion
In this article, we discussed the features of Windows Biometric Framework and its many advantages. We also looked at the step-by-step procedures on how to set up Windows fingerprint login.
Disable or Enable Biometrics Sign In on Windows joined to a Domain
Windows 11/10 supports the use of Biometrics. It already supports PIN, Password and Picture Password on all computers, but given the proper hardware, Windows 10 also supports facial scanning, Iris scanning as well as fingerprint scanning. You can find these settings inside Settings > Accounts > Sign In Options. But sometimes even if the hardware is available to support this feature called Windows Hello, you may not find the options available to enable this functionality. This post shows how you can enable or disable Domain Users Sign in on Windows 11/10 using Biometrics using Registry or GPEDIT.
Enable Biometrics Sign In on Windows 11/10 joined to a Domain
I recommended you create a System Restore Point. This is because while doing these types of modifications, there are chances that something breaks on the software side of your computer. Or, if you do not have any habit to make a system restore point, I would really encourage you to create one frequently.
1] Using Registry Editor
Hit the WINKEY + R button combination to launch the Run utility, type in regedit and hit Enter. Once Registry Editor opens, navigate to the following key-
Now, right click on the right side panel and click on New > DWORD (32-bit) Value.
Set the name of this newly created DWORD as Domain Accounts.
Double click on the newly created DWORD and set its value as 1 This will Allow Domain Users Sign In to Windows 10 Using Biometrics.
A value of 0 Disables Domain Users Sign In to Windows 10 Using Biometrics.
Exit the Registry Editor and then Reboot your computer for the changes to take effect.
2] Using Group Policy Editor
Hit the WINKEY + R button combination to launch the Run utility, type in gpedit.msc and hit Enter. Once Group Policy Editor opens, navigate to the following setting-
Computer Configuration > Administrative Templates > Windows Components > Biometrics
- Allow the use of Biometrics.
- Allow users to log on using Biometrics.
- Allow domain users to log on using biometrics.
Exit the Group Policy Editor and then reboot your computer for the changes to take effect. This will enable the setting.
Date: October 11, 2021 Tags: Login
Related Posts
Unable to set Security question for Local Account in Windows 11/10
Your credentials could not be verified – Windows Hello
Cannot change or modify PIN in Windows 11/10 [Fixed]
[email protected]
Ayush has been a Windows enthusiast since the day he got his first PC with Windows 98SE. He is an active Windows Insider since Day 1 and is now a Windows Insider MVP. He has been testing pre-release services on his Windows 10 PC, Lumia, and Android devices.
Как войти в свое хранилище паролей LastPass с помощью отпечатка пальца в Windows
Менеджеры паролей, такие как LastPass, являются наиболее безопасным способом создания и хранения паролей для всех ваших любимых сайтов. И, если вы хотите сделать их немного проще в использовании, вы можете мгновенно войти в хранилище LastPass, используя только отпечаток пальца.
Вам не нужно Windows Hello, чтобы сделать это, либо. LastPass может использовать Windows Biometric Framework — который доступен в Windows 7, 8 и 10 — чтобы разблокировать ваше хранилище паролей с помощью отпечатка пальца. Это работает со стандартными расширениями браузера LastPass, точно так же, как разблокировка вашего хранилища паролей с помощью отпечатка пальца на современном телефоне iPhone или Android.
Что вам нужно
Для этого вам понадобятся три вещи:
- Считыватель отпечатков пальцев, который поддерживает Windows Biometric Framework . Будут работать совместимые с Windows Hello устройства считывания отпечатков пальцев, встроенные в современные ноутбуки с Windows 10, а также устройства чтения USB, такие как Eikon Mini . Старые сканеры отпечатков пальцев, которые не совместимы с Windows Hello, также должны работать, включая сканеры отпечатков пальцев, встроенные в ноутбуки с Windows 7. Просто убедитесь, что он поддерживает Windows Biometric Framework.
- Премиум подписка LastPass. Для этой расширенной аутентификации требуется подписка LastPass Premium , которая стоит 12 долларов в год.
- LastPass Универсальный установщик Windows . Даже если у вас уже установлены стандартные расширения браузера LastPass, программа установки, доступная на веб-сайте LastPass, включает в себя дополнительное программное обеспечение, которое позволяет считывать отпечатки пальцев и другие расширенные функции, такие как обмен информацией о состоянии входа в систему между различными веб-браузерами, так что вам нужно только войти — или выйти -один раз за сессию. Сначала запустите установщик, иначе вы не сможете включить эту функцию.
Имея все это в руках, давайте настроим это.
Шаг первый: настройте сканер отпечатков пальцев
Вам нужно будет настроить сканер отпечатков пальцев и зарегистрировать отпечатки пальцев, прежде чем это сработает. Если вы пропустите этот шаг, LastPass попросит вас зарегистрировать отпечаток пальца с помощью программного обеспечения вашего сканера, прежде чем он сможет включить поддержку сканера отпечатков пальцев.
В Windows 10 перейдите в «Настройки»> «Учетные записи»> «Параметры входа» и добавьте отпечатки пальцев в разделе «Здравствуйте, Windows». Те же отпечатки, которые вы используете для Windows Hello, будут использоваться для LastPass и других приложений, которые используют Windows Biometric Framework.
В Windows 7 и 8 вам может потребоваться использовать служебное программное обеспечение, прилагаемое к драйверам аппаратного обеспечения вашего сканера отпечатков пальцев, чтобы установить эту функцию. Обратитесь к веб-сайту производителя за драйверами, если они не установлены. Если ваш сканер отпечатков пальцев встроен в ноутбук, посетите веб-сайт производителя ноутбука. Вы также можете найти способ регистрации отпечатков пальцев из Панели управления> Оборудование и звук> Биометрические устройства.
Шаг второй: включить считывание отпечатков пальцев в LastPass
Чтобы включить считывание отпечатков пальцев, войдите в расширение браузера LastPass в выбранном вами веб-браузере. Нажмите кнопку расширения LastPass и выберите «Мое хранилище».
Нажмите на свое имя в верхней части страницы хранилища и выберите «Настройки учетной записи».
Перейдите на вкладку «Многофакторные параметры». В качестве опции вы увидите «Отпечаток пальца / Смарт-карта». Нажмите кнопку «Изменить» справа от него.
Если все настроено правильно, вы сможете выбрать «Windows Fingerprint Reader» из поля «Тип» и установить для «Включено» значение «Да».
Вам будет предложено включить дополнительные функции расширения браузера, если параметры здесь недоступны. Следуйте инструкциям LastPass.
Нажмите «Обновить», и LastPass попросит вас ввести мастер-пароль. Затем расширение браузера попросит вас провести пальцем по сканеру отпечатков пальцев, чтобы настроить аутентификацию по отпечатку пальца.
В следующий раз, когда вы войдете в свое хранилище паролей LastPass на своем ПК, вы сможете быстро разблокировать ваше хранилище с помощью отпечатка пальца. Вам не нужно будет вводить свой главный пароль. Легко!