How to Enable or Disable Biometrics Sign-in for Domain Users

USER CANNOT LOG IN TO THE WINDOWS OPERATING SYSTEM OR A DOMAIN USING FINGERPRINTS EVEN THOUGH THE WINDOWS FINGERPRINT LOGIN SETTING HAS BEEN ENABLED IN THE FINGERPRINT SOFTWARE

Symptom

The user cannot log in to the Windows Operating System or a domain using fingerprints even though the Use fingerprint scan instead of password when logging into Windows setting is enabled in the fingerprint software.

Affected configurations

This occurs on computers with the following hardware and software configurations:

• A fingerprint reader
• The Windows 7 operating system
• The fingerprint software 5.9 or a later version

This is because besides enabling the Windows fingerprint login setting in the fingerprint software, the user also needs to enable the Windows or domain biometric settings in Control Panel.

[1] Solution 1

To enable the Windows or domain biometric settings in Control Panel, do the following:

1. Click Start > Control Panel > Hardware and Sound > Biometric Devices > Change biometric settings. The Change biometric settings window is displayed.
2. Select Biometrics on.
3. Select Allow users to log on to Windows using their fingerprints.
4. Select Allow users to log on to a domain using their fingerprints if the check box is available.
5. Click Save Changes to save your configuration.
6. Log off from the Windows operating system.

You will be able to use your fingerprints the next time you log in to the Windows operating system or a domain.

[2] Solution 2

Enable or Disable Fingerprint Sign-in for Domain Users using a REG File

   Note

The .reg files below are for the registry key and value below.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\Credential Provider

Domain Accounts DWORD

0 = Disable Fingerprint for Domain users
1 = Enable Fingerprint for Domain users

1. Do step 2 or 3 below for what you would like to do.

2. To Disable Fingerprint Sign-in for Domain Users
NOTE: This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Prevent_Domain_Users_to_Sign-in_using_Biometrics.reg

3. To Enable Fingerprint Sign-in for Domain Users

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Allow_Domain_Users_to_Sign-in_using_Biometrics.reg

4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. If prompted, click/tap on Run, Yes (UAC), Yes, and OK.

7. When finished, you can delete the downloaded .reg file if you like.

[2] Solution 2

Enable or Disable Fingerprint Sign-in for Domain Users in Group Policy

NOTE: This option for using group policy is only available in the Windows 8.1 Pro, Windows RT 8.1 Pro, and Windows 8.1 Enterprise editions.

1. From the Start screen, start typing gpedit.msc, and press Enter when finished.
NOTE: You could also press Windows+R to open the Run dialog, type gpedit.msc, and click/tap on OK.

2. If prompted by UAC, then click/tap on Yes.

3. In the left pane, click/tap on to expand Computer Configuration, Administrative Templates, Windows Components, and open Biometrics. (see screenshot below)

4. In the right pane of Biometrics, double click/tap on Allow domain users to log on using biometrics. (see screenshot above)

5. Do step 6 or 7 below for what you would like to do.

6. To Disable Fingerprint Sign-in for Domain Users

A) Select (dot) Disabled or Not Configured, click/tap on OK, and go to step 8 below. (see screenshot below step 7A)
NOTE: Not Configured is the default setting.

7. To Enable Fingerprint Sign-in for Domain Users

A) Select (dot) Enabled, click/tap on OK, and go to step 8 below. (see screenshot below)

8. You can now close the Local Group Policy Editor window if you like.

That's it,