Windows Hello on corporate Domain

Discussion in 'Microsoft Surface General Discussion' started by sepf42, Jul 29, 2019.

  1. sepf42

    sepf42 New Member

    Joined:
    Jul 29, 2019
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    My Device:
    Other
    I have a Surface Laptop 2 but thought this probably belongs in the general discussion as i believe it to not be hardware specific.

    I cannot get Windows hello, fingerprint, or PIN logon authentication to function at all once the laptop is added to the domain. It did work fine prior to joining the domain. The message I get from the "Sign-in Options" for each of those is "Something went wrong. Try again later." I've been able to get it working at a previous organization via some registry manipulation that allowed these greyed out options to function. And looking those up again I've made some of those changes, this time those did not work out. This is the favorite one.

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
    "AllowDomainPINLogon"=dword:00000001


    I do have the authority to make Active Directory and GPO changes, so I could fix this if I knew what needed to be set. Is there an official list of settings/requirements that need to be set in order for this to function? I cannot find it anywhere. And I think even google is getting frustrated with me at this point.

    Computer is running windows 10 version 1903 with an enterprise license.

    Also a side note, to whom ever runs this site: "Thank you for running the site, great service, it is however 2019, and I recommend buying a certificate"
     
    Last edited: Jul 29, 2019
  2. jnjroach

    jnjroach Administrator Staff Member

    Joined:
    Nov 9, 2012
    Messages:
    7,955
    Likes Received:
    1,881
    Trophy Points:
    113
    Location:
    Seattle, WA USA
    My Device:
    SurfaceProX
    Have you configured Windows Hello for Business? There was a fundamental change in Windows 10 starting with 1607. This article should help: https://support.microsoft.com/en-us...n-convenience-pin-and-hello-for-business-poli
     

Share This Page