Windows Hello for Business infrastructure

Windows Hello for Business infrastructure

What is windows hello?

Windows Hello is a more personal way to sign in to your Windows 10 devices with just a look or a touch. You’ll get enterprise-grade security without having to type in a password.

When you set up Windows Hello, it takes the data from the face or iris sensor or fingerprint reader and creates a data representation. It is then encrypted and stored in your device.

Steps for enabling windows hello via group policy

 

Install windows 10 administrative template

 

  1. Download the Windows 10 administrative templates on your domain controller from

https://www.microsoft.com/en-us/download/details.aspx?id=48257

  1. Install the .admx file in your domain controller

Then turn ON & enable PIN sign-in for Domain users

  1. PressWindows Key + R combination, type put msc in Run dialog box and hit Enter to open the Local Group Policy Editor.
  1. In the left pane of Local Group Policy Editor, navigate here:

Computer Configuration -> Administrative Templates -> System -> Logon -> Turn on pin sign-in

  1. In the right pane of above shown window, look for the setting namedTurn on PIN sign-in which must be Not Configured by default. Double click on the same setting to get this:
  1. Finally, in the above shown window, click Enabled and then click Apply followed by OK.