Windows 10: Fingerprint and Pin authentication During OOBE

Hello,


I have a question in regards to a Windows 1903 enterprise environment.

The question is how can we take a vanilla image and disable the fingerprint Windows Hello feature on some devices with fingerprint technology. That is getting a device from OOBE to join a UEM solution during initial setup prior to user credential being provided?


Is there a registry command to disable the fingerprint authentication?

Can I add a command to an unattended file to omit this step in the OOBE process?


Thanks for any help in this area.

:)

 

Can I use fingerprint and PIN for Windows Authentication in Windows 10?

That does not address my question. I am trying to figure out how to enable fingerprint and PIN for authentication. I am not interested in face recognition at this time.

Can someone please tell me whether Windows 10 allows you to require dual form factor authentication? Again, I want to require that users submit both a fingerprint and PIN to log into Windows.

Thanks!

-Reuben

 

Configuration option for fingerprint signon missing

I'm a step further:

The installed driver for the fingerprint reader has to be deleted from device manager. Windows 10 then install a "Synaptics" driver for the fingerprint reader.

In a second step, a PIN has to be specified in the account options. After that, the fingerprint option misteriously appears and it's possible to record the fingerprint.

BUT: I absolutely can't understand why a PIN is required for fingerprint logon. Now, I can logon to my domain joined Windows 10 client with just a 4 digit PIN, despite we have complex password requirements configured in the domain policies.

I tried to setup two factor authentication with PIN and fingerprint, but haven't found a way. There is absolutely no description how to implement 2 factor authentication in Windows 10. Seems to be Vaporware..

Franz

 

Fingerprint sign-in missing from options!

I'm a step further:

The installed driver for the fingerprint reader has to be deleted from device manager. Windows 10 then install a "Synaptics" driver for the fingerprint reader.

In a second step, a PIN has to be specified in the account options. After that, the fingerprint option misteriously appears and it's possible to record the fingerprint.

BUT: I absolutely can't understand why a PIN is required for fingerprint logon. Now, I can logon to my domain joined Windows 10 client with just a 4 digit PIN, despite we have complex password requirements configured in the domain policies.

I tried to setup two factor authentication with PIN and fingerprint, but haven't found a way. There is absolutely no description how to implement 2 factor authentication in Windows 10. Seems to be Vaporware..

Franz