Windoes 10 Anniversary Edition, Domain and Windows Hello

Technology Microsoft
1

I have tried everything I can think of to get Windows Hello working on a brand new Dell laptop. It was working great before I joined it to the domain and upgraded it to Anniversary.

I have tried every Group Policy combo I can think to try.

https://blogs.technet.microsoft.com/ash/2016/08/13/changes-to-convenience-pin-and-thus-windows-hello-behaviour-in-windows-10-version-1607/

That page says you only need to enable Turn on convenience PIN sign-in and I have done that. I see the registry key get added, but PIN and Hello are still greyed out.

Any ideas?

2

With the Anniversary Edition, I had to add the following registry key to get it to work.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
“AllowDomainPINLogon”=dword:00000001

I ran across the following TechNet forum that discussed it. No official blog about it that I’ve come across, and since I got it working on the 2 devices I use by adding the registry key, I haven’t bothered to dig deeper to see if there is some other combination of settings that resolve it. I haven’t set up any GPO policies related to Hello.

https://social.technet.microsoft.com/Forums/en-US/b975932a-b50b-4759-b43a-c94854c6da83/cant-enable-windows-hello-with-fresh-install-of-anniversity-upgrade-on-domain-account?forum=win10itprosetup

3

Using the convenience PIN sign-in group policy setting automatically adds that registry key. For me, still no go.

I have also tried it without the GP and manually adding the registry key, still not working.

4

Got it working! Found another GP that was stopping it. Thanks!