Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification  

    Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    How to Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification in Windows 10
    Published by Category: Security System
    16 Jan 2020
    Designer Media Ltd



    How to Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification in Windows 10


    If your Windows 10 PC supports Windows Hello and you have setup facial recognition, then you can enable enhanced anti-spoofing.

    Enhanced anti-spoofing is an optional additional security feature for Windows Hello face authentication that acts as a countermeasure for any unauthorized access via spoofing. It is not enabled by default. If you enable this setting, Windows requires all users on managed devices to use enhanced anti-spoofing for Windows Hello face authentication. This disables Windows Hello face authentication on devices that do not support enhanced anti-spoofing.

    This tutorial will show you how to enable or disable enhanced anti-spoofing for Windows Hello face authentication for all users in Windows 10.

    You must be signed in as an administrator to enable or disable enhanced anti-spoofing.

    Enhanced anti-spoofing for Windows Hello face authentication is not required on unmanaged devices.



    Contents

    • Option One: Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using Local Group Policy Editor
    • Option Two: Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using a REG file






    OPTION ONE

    Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using Group Policy


    The Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Two below.


    1 Open the Local Group Policy Editor.

    2 In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)

    Computer Configuration\Administrative Templates\Windows Components\Biometrics\Facial Features

    Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification-windows_hello_enhanced_anti-spoofing-1.png

    3 In the right pane of Facial Features in Local Group Policy Editor, double click/tap on the Configure enhanced anti-spoofing policy to edit it. (see screenshot above)

    4 Do step 5 (disable) or step 6 (enable) below for what you would like to do.


    5 To Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

    Not Configured is the default setting.


    6 To Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)

    Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification-windows_hello_enhanced_anti-spoofing-2.png


    7 When finished, you can close the Local Group Policy Editor if you like.






    OPTION TWO

    To Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using a REG file


    The downloadable .reg files below will modify the DWORD value in the registry key below.

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures

    EnhancedAntiSpoofing DWORD

    (delete) = Disable
    1 = Enable


    1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.


    2 To Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    A) Click/tap on the Download button below to download the file below, and go to step 4 below.

    Enable_enhanced_anti-spoofing_for_Windows_Hello_face_recognition.reg

    Download


    3 To Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    This is the default setting.

    A) Click/tap on the Download button below to download the file below, and go to step 4 below.

    Disable_enhanced_anti-spoofing_for_Windows_Hello_face_recognition.reg

    Download


    4 Save the .reg file to your desktop.

    5 Double click/tap on the downloaded .reg file to merge it.

    6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

    7 If you like, you can now delete the downloaded .reg file.


    That's it,
    Shawn





  1. Posts : 64
    Windows 10
       #1

    Does the Logitech BRIO 4K camera support this feature? If I enable anti spoofing then when I next try to login with the BRIO it says it has been disabled by the administrator. I'm running the latest December 2017 firmware and Windows 10 1709.
      My Computer


  2. Posts : 61,585
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    Hello xy677, :)

    If it works when you have this disabled, then it appears it may not support anti-spoofing. It will be interesting to hear from other BRIO 4K owners to see if they have the same issue.
      My Computers


  3. Posts : 64
    Windows 10
       #3

    Well I'm not sure because I thought it did with the Dec 12 firmware update?
      My Computer


  4. Posts : 1
    Windows 10 Pro (1803)
       #4

    Does anyone know what stand-alone camera(s) support the “enhanced anti-spoofing” feature that’s available for Windows Hello in builds 1703 and later of Microsoft Windows 10? As far as I can tell, only the built-in cameras on the recent Microsoft Surface Pro tablet PCs support this feature; I can't find any manufactures that claim to support this feature, or any mention of other cameras on any website online.

    I recently configured Windows Hello for Business for my company's on-premise AD domain, and right now the only Biometric login devices being used are fingerprint readers. I'd like to test how it works via IR camera, but I'd rather minimize the risk of spoofing by using a camera that supports the “enhanced anti-spoofing” feature, but right now I have no idea if any cameras even support this feature.

    https://www.zdnet.com/article/window...nted-headshot/

    https://www.thewindowsclub.com/enabl...ure-windows-10
    Last edited by dewdrop; 02 Aug 2018 at 04:44.
      My Computer


  5. Posts : 42
    Windows 8.1 x64, soon Windows 10 1903
       #5

    The Mouse CM-02 webcam support enhanced anti-spoofing for Windows Hello even on Windows 10 1903: https://www.amazon.com/Updated-Mouse.../dp/B07NRLB1QW Note that enhanced anti-spoofing requires a PC with TPM 2.0 to securely store the face data.
      My Computer


 

Tutorial Categories

Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 03:51.
Find Us




Windows 10 Forums