Enabling Windows Hello on domain-connected computers
Posted: (EET/GMT+2)
Microsoft's Windows Hello is an authentication method that allows you to use biometrics, such as fingerprints and face recognition to log in to Windows 10.
However, by default Windows Hello is only available is you log in using a Microsoft Account. When you log in with a domain account (Active Directory), you'll find that Windows Hello is not available: the buttons to enable it are disabled in Windows settings.
To solve this, you must adjust your computer policies through "gpedit.msc", alias "Local Group Policy Editor". There, under "Computer Configuration / Administrative Templates / Windows Components / Biometrics", select the setting "Allow the use of biometrics", and enable settings.
Now return to the Windows settings screen, and the buttons should become enabled.