Use Windows Hello for Business

Windows Hello for Business is an alternative method for signing into Windows using your Active Directory or Azure Active Directory account that can replace passwords, Smart Cards, and Virtual Smart Cards.

If you enable this policy, the device provisions Windows Hello for Business using keys or certificates for all users.

If you disable this policy setting, the device does not provision Windows Hello for Business for any user.

If you do not configure this policy setting, users can provision Windows Hello for Business as a convenience credential that encrypts their domain password.


Supported on: At least Windows 10 Server or Windows 10
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Microsoft\PassportForWork
Value NameEnabled
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

passport.admx

Administrative Templates (Computers)

Administrative Templates (Users)