Windows 10: How do I re-enable PIN + Fingerprint sign-in for domain PCs?

A previous GPO tech set these to be disabled by default and I can't figure out how to re-enable. The options stay greyed out no matter what I try. I don't want to remove the settings to disable from the default policy so I have created an additional GPO for certain PCs to have it enabled and I'm just trying to find all of the settings to get this working again for the approved users.

This is what I have set currently...
In Computer -> Policies -> Admin Templates:
System/Logon -> Turn on PIN sign-in = Enabled
Windows Components/Biometrics -> Allow domain users to log on using biometrics = Enabled
Windows Components/Biometrics -> Allow users to log on using biometrics = Enabled
Windows Components/Biometrics -> Allow the use of biometrics = Enabled
Windows Components/Microsoft Passport for Work -> Use biometrics = Enabled
Windows Components/Microsoft Passport for Work -> Use Microsoft Passport for Work = Enabled

Any suggestions are most welcome *Smile

Thanks

:)

 

Fingerprint reader doesn't work

If it's in domain you need to enable PIN in gpo, or in local polices (gpedit.msc):

Computer Configuration -> Policies -> Administrative Templates -> System -> Logon ->
Turn On Pin Sign-in = Enabled

After that Windows Hello/PIN/Fingerprint auth it's available

 

Some settings are managed by your organiztion. Won't let me use Windows Hello?

"Are you connected to a Domain Network?"

Yes, i connected to a domain network, and then fingerprint, PIN change is not avaiable in sign-in option.

please help.