Can't Enable Windows Hello - Some Settings Are Managed By Your Organization
Answer : I found the solution. The reason is that Windows Hello is managed differently on domain joined computers, starting with the anniversary update. To get it to work you have to follow these steps: 1) Setup a Group Policy Central Store (you should already have that) 2) Get Windows 10 Anniversary Update Group Policy Templates . You can do so by copying your files from PolicyDefinitions (in windir on a Win10 Anniversary Update machine) into the PolicyDefinitions of the central store. You might copy those files first to a file share, because of permissions your regular user should not have on the central store. 3) Setup a new GPO or add to an existing the following settings to enable Windows Hello: Computer Configuration/Policies/Administrative Templates .../Windows Components/Windows Hello For Business/ Use biometrics => Enabled .../Windows Components/Windows Hello for Business/ Use a hardware security device => Enabled (if you want to use TPM instead of k...