A previous GPO tech set these to be disabled by default and I can't figure out how to re-enable. The options stay greyed out no matter what I try. I don't want to remove the settings to disable from the default policy so I have created an additional GPO for certain PCs to have it enabled and I'm just trying to find all of the settings to get this working again for the approved users.

This is what I have set currently...
In Computer -> Policies -> Admin Templates:
System/Logon -> Turn on PIN sign-in = Enabled
Windows Components/Biometrics -> Allow domain users to log on using biometrics = Enabled
Windows Components/Biometrics -> Allow users to log on using biometrics = Enabled
Windows Components/Biometrics -> Allow the use of biometrics = Enabled
Windows Components/Microsoft Passport for Work -> Use biometrics = Enabled
Windows Components/Microsoft Passport for Work -> Use Microsoft Passport for Work = Enabled

Any suggestions are most welcome

Thanks