Windows 10: Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification

How to: Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification


Information If your Windows 10 PC supports facial recognition, then you can enable enhanced anti-spoofing.

Enhanced anti-spoofing is an optional additional security feature for Windows Hello face authentication that acts as a countermeasure for any unauthorized access via spoofing. It is not enabled by default. If you enable this setting, Windows requires all users on managed devices to use enhanced anti-spoofing for Windows Hello face authentication. This disables Windows Hello face authentication on devices that do not support enhanced anti-spoofing.

This tutorial will show you how to enable or disable enhanced anti-spoofing for Windows Hello face authentication for all users in Windows 10.

You must be signed in as an administrator to enable or disable enhanced anti-spoofing.


Note Enhanced anti-spoofing for Windows Hello face authentication is not required on unmanaged devices.

CONTENTS:

• Option One: Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using Local Group Policy Editor
• Option Two: Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using a REG file

OPTION ONE [/i] Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using Group Policy


Note Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Two below.


1. Open the Local Group Policy Editor.

2. In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)
*Arrow Computer Configuration\Administrative Templates\Windows Components\Biometrics\Facial Features




3. In the right pane of Facial Features in Local Group Policy Editor, double click/tap on the Configure enhanced anti-spoofing policy to edit it. (see screenshot above)

4. Do step 5 (disable) or step 6 (enable) below for what you would like to do.


5. To Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification
A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

NOTE: Not Configured is the default setting.

6. To Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification
A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)




7. When finished, you can close the Local Group Policy Editor if you like.





OPTION TWO [/i] To Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using a REG file


Note The downloadable .reg files below will modify the DWORD value in the registry key below.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures

EnhancedAntiSpoofing DWORD

(delete) = Disable
1 = Enable

1. Do step 2 (enable) or step 3 (disable) below for what you would like to do.


2. To Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification
A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Enable_enhanced_anti-spoofing_for_Windows_Hello_face_recognition.reg

Download

3. To Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification
NOTE: This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Disable_enhanced_anti-spoofing_for_Windows_Hello_face_recognition.reg

Download
4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7. If you like, you can now delete the downloaded .reg file.

That's it,
Shawn


Related Tutorials

• How to Set Up Windows Hello Face Recognition in Windows 10
• How to Remove Your Face from Windows Hello in Windows 10
• How to Improve Windows Hello Face Recognition in Windows 10
• How to Turn On or Off Automatically Dismiss Lock Screen for Windows Hello Face in Windows 10
• How to Enable or Disable Windows Hello Biometrics in Windows 10
• How to Enable or Disable Domain Users to Sign in to Windows 10 using Biometrics
• How to Enable or Disable Users to Sign in to Windows 10 using Biometrics

:)

 

WINDOWS HELLO LOGIN

Tried your suggestions to repair windows hello. steps one and two did not work.
enhanced anti-spoofing feature was already disabled. Step 3 not able to find hello, webcam. and fingerprint drivers in device manager, even after enabling hidden devices. Thanks

 

Windows Hello says I'm too close?

Hello Markku,

The possible cause of this issue is an error or a change in settings in Group policy. You can fix this by following the steps below:

Edit group policy on Server

• Go to Policies > Administrative Templates
• Windows Components > Biometrics> Facial Features
  
  "Use enhanced anti-spoofing when available" change 'Not Configured' to 'disabled'

Keep us updated with the result.

 

Hello xy677, *Smile

If it works when you have this disabled, then it appears it may not support anti-spoofing. It will be interesting to hear from other BRIO 4K owners to see if they have the same issue.

 

Well I'm not sure because I thought it did with the Dec 12 firmware update?