Use phone sign-in

Use this policy setting to configure use of phone sign-in. Phone sign-in provides the ability for a phone to be usable as a companion device for desktop authentication. Phone sign-in requires that both the PC and the phone are registered with the same Azure AD tenant. Additionally, the phone must be enrolled in Windows Hello for Business.

If you enable this policy setting, phone sign-in will be enabled, allowing the use of a phone as a companion device for desktop authentication.

If you disable or do not configure this policy setting, phone sign-in will be disabled, preventing the use of a phone as a companion device for desktop authentication.


Supported on: At least Windows 10 Server or Windows 10
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Microsoft\PassportForWork\Remote
Value NameEnabled
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

passport.admx

Administrative Templates (Computers)

Administrative Templates (Users)