Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification  

    Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification in Windows 10
    Published by Category: Security System
    16 Sep 2018
    Designer Media Ltd


    information   Information
    If your Windows 10 PC supports Windows Hello and you have setup facial recognition, then you can enable enhanced anti-spoofing.

    Enhanced anti-spoofing is an optional additional security feature for Windows Hello face authentication that acts as a countermeasure for any unauthorized access via spoofing. It is not enabled by default. If you enable this setting, Windows requires all users on managed devices to use enhanced anti-spoofing for Windows Hello face authentication. This disables Windows Hello face authentication on devices that do not support enhanced anti-spoofing.

    This tutorial will show you how to enable or disable enhanced anti-spoofing for Windows Hello face authentication for all users in Windows 10.

    You must be signed in as an administrator to enable or disable enhanced anti-spoofing.
    Note   Note
    Enhanced anti-spoofing for Windows Hello face authentication is not required on unmanaged devices.

    CONTENTS:
    • Option One: Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using Local Group Policy Editor
    • Option Two: Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using a REG file





    Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification OPTION ONE Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification
    Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using Group Policy

    Note   Note
    Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Two below.


    1. Open the Local Group Policy Editor.

    2. In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)

    Computer Configuration\Administrative Templates\Windows Components\Biometrics\Facial Features

    Name:  Windows_Hello_Enhanced_anti-spoofing-1.png
Views: 2040
Size:  44.0 KB

    3. In the right pane of Facial Features in Local Group Policy Editor, double click/tap on the Configure enhanced anti-spoofing policy to edit it. (see screenshot above)

    4. Do step 5 (disable) or step 6 (enable) below for what you would like to do.


     5. To Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

    NOTE: Not Configured is the default setting.


     6. To Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)

    Name:  Windows_Hello_Enhanced_anti-spoofing-2.png
Views: 2107
Size:  36.1 KB

    7. When finished, you can close the Local Group Policy Editor if you like.






    Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification OPTION TWO Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification
    To Enable or Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification using a REG file

    Note   Note
    The downloadable .reg files below will modify the DWORD value in the registry key below.

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures

    EnhancedAntiSpoofing DWORD

    (delete) = Disable
    1 = Enable

    1. Do step 2 (enable) or step 3 (disable) below for what you would like to do.


     2. To Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    A) Click/tap on the Download button below to download the file below, and go to step 4 below.

    Enable_enhanced_anti-spoofing_for_Windows_Hello_face_recognition.reg

    download


     3. To Disable Enhanced Anti-Spoofing for Windows Hello Face Authentification

    NOTE: This is the default setting.

    A) Click/tap on the Download button below to download the file below, and go to step 4 below.

    Disable_enhanced_anti-spoofing_for_Windows_Hello_face_recognition.reg

    download

    4. Save the .reg file to your desktop.

    5. Double click/tap on the downloaded .reg file to merge it.

    6. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

    7. If you like, you can now delete the downloaded .reg file.


    That's it,
    Shawn


  1.    04 Jan 2018 #1

    Does the Logitech BRIO 4K camera support this feature? If I enable anti spoofing then when I next try to login with the BRIO it says it has been disabled by the administrator. I'm running the latest December 2017 firmware and Windows 10 1709.
      My ComputerSystem Spec

  2. Brink's Avatar
    Posts : 34,491
    64-bit Windows 10 Pro build 18290
    Thread Starter
       04 Jan 2018 #2

    Hello xy677, :)

    If it works when you have this disabled, then it appears it may not support anti-spoofing. It will be interesting to hear from other BRIO 4K owners to see if they have the same issue.
      My ComputersSystem Spec

  3.    04 Jan 2018 #3

    Well I'm not sure because I thought it did with the Dec 12 firmware update?
      My ComputerSystem Spec


  4. Posts : 1
    Windows 10 Pro (1803)
       02 Aug 2018 #4

    Does anyone know what stand-alone camera(s) support the “enhanced anti-spoofing” feature that’s available for Windows Hello in builds 1703 and later of Microsoft Windows 10? As far as I can tell, only the built-in cameras on the recent Microsoft Surface Pro tablet PCs support this feature; I can't find any manufactures that claim to support this feature, or any mention of other cameras on any website online.

    I recently configured Windows Hello for Business for my company's on-premise AD domain, and right now the only Biometric login devices being used are fingerprint readers. I'd like to test how it works via IR camera, but I'd rather minimize the risk of spoofing by using a camera that supports the “enhanced anti-spoofing” feature, but right now I have no idea if any cameras even support this feature.

    https://www.zdnet.com/article/window...nted-headshot/

    https://www.thewindowsclub.com/enabl...ure-windows-10
    Last edited by dewdrop; 02 Aug 2018 at 04:44.
      My ComputerSystem Spec


 

Tutorial Categories

Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


Related Threads
How to Enable or Disable Enhanced PINs for BitLocker Startup in Windows 10 When you turn on BitLocker for the operating system drive with a compatible TPM, you can choose to unlock the OS drive at startup with a PIN. The Allow enhanced PINs...
Anti-virus and Anti-malware?? in AntiVirus, Firewalls and System Security
1. Do I need a particular anti-malware software , in addition to Anti-virus? 2. Is the paid version of Avast good and sufficient enough to reduce risks? 3. Is "malware" a collective term that includes ransomware, adware, spyware ...... or are...
How to Turn On or Off Hyper-V Enhanced Session Mode in Windows 10 Hyper-V enables running virtualized computer systems on top of a physical host. These virtualized systems (aka: guests) can be used and managed just as if they were physical...
Most anti-virus/anti-malware method of browsing in AntiVirus, Firewalls and System Security
It seems that so many anti-virus products are decent and do a fair job of protecting your computer, whether or not you pay for them. And all reviews I've read over the years usually conclude that free is best, because the "extra stuff" you get...

Tags for this Thread

Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 20:17.
Find Us