Windows 10: Dual enrollment using biometric authentication

Discus and support Dual enrollment using biometric authentication in AntiVirus, Firewalls and System Security to solve the problem; Hello I'm configuring Windows Hello for business for a customer of mine. The customer is very interested to the Dual Enrollment feature logging in... Discussion in 'AntiVirus, Firewalls and System Security' started by cornova, Nov 16, 2020.

  1. cornova Win User

    Dual enrollment using biometric authentication


    Hello


    I'm configuring Windows Hello for business for a customer of mine. The customer is very interested to the Dual Enrollment feature logging in with a standard user and "elevating" to an administrative user when needed, so that he does not need to type the password of theirs administrative accounts.


    Reading the following article:


    https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-feature-dual-enrollment


    ... selecting the privileged user account, and providing their PIN.


    and after some testing, it seems that a user can unlock/use the administrative user by typing PIN only, even if he has registered a biometric credential for it.

    The customer would like to use fingerprints or face scans to unlock the administrative user on dual enrollment scenario logging in with a standard user and "elevating" to an administrative user when needed.


    Is it possibile? If no, are there any plans to do so in the future?

    :)
     
    cornova, Nov 16, 2020
    #1

  2. biometric devices

    Hi,

    Thank you for posting your query on Microsoft Community.

    I understand your inconvenience. We will assist you to resolve this issue.

    I suggest you to follow the methods provided below and check if it helps.

    Method 1: Enable Biometric option.

    I suggest you to enable the Biometrics to pick up the Biometrics setting. This option shall be enable by default. However, I recommend you to follow the steps provided below and check if it enable or not.

    • Press Windows logo key + R key.
    • Type gpedit.msc and press
      Enter
      key.
    • Under Computer Configuration, navigate to.
    Administrative Templates Windows Components Biometrics

    In the left hand panel of the Windows, double click on the following:

    • Allow the use of biometrics
    • Allow users to log on using biometrics
    Select enable option and click on Apply and
    OK button.

    Now, restart your computer and follow the instructions provided below.

    After restarting the computer, I suggest you to disconnect and reconnect the fingerprint sensor device and check if the drivers are getting detected in Device Manager. If the issue still persist, follow method 2.

    Method 2: Reinstall drivers and compatibility mode.

    I suggest you to download and install the latest drives for fingerprint sensor device from the manufacture’s website and check if it gets detected.

    If the issue still persist, you may also install the drivers in compatibility mode and check.

    Follow the steps to install the drivers in compatibility mode.

    • Download the drivers from the manufacturer’s website.
    • Right-click on the installer and click on "Properties".
    • Click on the ‘compatibility’ tab and check the box "Run this program in compatibility mode for” and select previous Operating System from the drop down.
    • Click on ‘Apply’ and click ‘OK’ and run the file to install it.

    After installing the drivers in compatibility mode, follow the method 3 and check if you are able to get the sign in option with Biometric.

    Method 3:

    • Press Windows logo key + I key.
    • Click on Accounts.
    • Go to Sign in options.
    • The fingerprint option will always be visible if there is a WBF-supported fingerprint reader (and its associated driver) installed on the computer.

    For more information, refer the following Microsoft help article.

    Biometric Devices

    Biometric Devices (Windows Drivers)

    Hope it helps. Do let us know if your issue is resolved. For any further query, feel free to contact us.

    Thank you.
     
    Syed Md Bilal, Nov 16, 2020
    #2
  3. Windows Logon: 2-Factor Biometric Authentication

    I have done some reading that Windows10 will incorporate 2-factor authentication.

    I was wondering for Windows Logon, does Windows10 support password AND biometric (e.g. fingerprint) authentication? If so, can you provide any feedback on exactly how this is implemented?

    Thank you.
     
    biocentrism, Nov 16, 2020
    #3
  4. Brink Win User

    Dual enrollment using biometric authentication

    New Microsoft Authenticator version for Android and iOS - Oct. 12

    Two factor authentication (TFA) is easy, convenient, and secure when you use Microsoft Authenticator. Use your phone, not your password, to log into your Microsoft account. Just enter your username, then approve the notification sent to your phone. Your fingerprint, face ID, or PIN will provide a second layer of security in this two step verification process. After youve signed in with two factor authentication (TFA), youll have access to all your Microsoft products and services, such as Outlook, OneDrive, Office, and more.

    Microsoft Authenticator version 6.2010.6717 for Android

    Source: Microsoft Authenticator - Apps on Google Play




    Microsoft Authenticator version 6.4.39 for iOS

    Download: Microsoft Authenticator | App Store
     
    Brink, Nov 16, 2020
    #4
Thema:

Dual enrollment using biometric authentication

Loading...
  1. Dual enrollment using biometric authentication - Similar Threads - Dual enrollment using

  2. Microsoft Authenticator is asking me to authenticate using Microsoft Authenticator to use...

    in Windows 10 Software and Apps
    Microsoft Authenticator is asking me to authenticate using Microsoft Authenticator to use...: So first of all... Why is "microsoft Authenticator" not an option in the "Products" dropdown when choosing where this post should go? I'm just going to choose "Windows"... Sorry not sorry.Also, I can't take a screenshot on the microsoft Authenticator app without it capturing...
  3. Microsoft Authenticator is asking me to authenticate using Microsoft Authenticator to use...

    in Windows 10 Gaming
    Microsoft Authenticator is asking me to authenticate using Microsoft Authenticator to use...: So first of all... Why is "microsoft Authenticator" not an option in the "Products" dropdown when choosing where this post should go? I'm just going to choose "Windows"... Sorry not sorry.Also, I can't take a screenshot on the microsoft Authenticator app without it capturing...
  4. authenticator is asking me to authenticate using authenticator to use authenticator

    in Windows 10 Software and Apps
    authenticator is asking me to authenticate using authenticator to use authenticator: So first of all... Why is "microsoft Authenticator" not an option in the "Products" dropdown when choosing where this post should go? I'm just going to choose "Windows"... Sorry not sorry.Also, I can't take a screenshot on the microsoft Authenticator app without it capturing...
  5. authenticator is asking me to authenticate using authenticator to use authenticator

    in Windows 10 Gaming
    authenticator is asking me to authenticate using authenticator to use authenticator: So first of all... Why is "Microsoft Authenticator" not an option in the "Products" dropdown when choosing where this post should go? I'm just going to choose "Windows"... Sorry not sorry.Also, I can't take a screenshot on the Microsoft Authenticator app without it capturing...
  6. Biometric missing or Uninstalled Biometric device using Device Manager

    in Windows 10 News
    Biometric missing or Uninstalled Biometric device using Device Manager: [ATTACH]If the Biometric device driver is missing in your system’s Device Manager or you have uninstalled it accidentally, this post will help you restore it. You might have seen that Windows 10 provides users with some additional sign-in options, like Windows Hello...
  7. Possible to determine how a user authenticated: Password, PIN, Biometric etc.?

    in Windows 10 Ask Insider
    Possible to determine how a user authenticated: Password, PIN, Biometric etc.?: For an unknown reason, something possessed me to click a 'Learn More' link while setting up biometric sign-in, something I've done dozens of times before. I quickly scanned the page skimming each section, not really looking for anything in particular, until I read "What data...
  8. Using Biometrics in Active Directory

    in AntiVirus, Firewalls and System Security
    Using Biometrics in Active Directory: I have tried setting GPO to allow for use of Biometrics in AD authentication to no success. Someone help? https://answers.microsoft.com/en-us/windows/forum/all/using-biometrics-in-active-directory/869fc004-b40a-4f9e-b809-c1912e0515dc
  9. Biometric authentication for chrome autofill

    in Windows 10 Ask Insider
    Biometric authentication for chrome autofill: submitted by /u/HovercraftMain [link] [comments] https://www.reddit.com/r/Windows10/comments/k0uc10/biometric_authentication_for_chrome_autofill/
  10. Windows Logon: 2-Factor Biometric Authentication

    in Windows 10 Support
    Windows Logon: 2-Factor Biometric Authentication: I have done some reading that Windows10 will incorporate 2-factor authentication. I was wondering for Windows Logon, does Windows10 support password AND biometric (e.g. fingerprint) authentication? If so, can you provide any feedback on exactly how this is implemented?...