Use enhanced anti-spoofing when available

This policy setting determines whether enhanced anti-spoofing is configured for devices which support it.

If you do not configure this policy setting, users will be able to choose whether or not to use enhanced anti-spoofing on supported devices.

If you enable this policy setting, Windows will require all users on the device to use anti-spoofing for facial features, on devices which support it.

If you disable this policy setting, enhanced anti-spoofing is turned off for all users on the device and they will be unable to turn it on.

Supported on: At least Windows 10 Server or Windows 10
Registry PathSOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures
Value NameEnhancedAntiSpoofing
Enabled Value1
Disabled Value0


Administrative Templates (Computers)

Administrative Templates (Users)