Close Registry Editor and restart your computer to see if this procedure has been successful. Setting the value data of PassportForWork to 0.
A first step in our approach is to disallow users from using there password to log in, by enforcing Windows Hello for Business.| Double-click on PasswordForWork and set the value data to 0 to disable Windows Hello for Business and click Ok to confirm. 3rd party or Windows Hello for Business) already in-place. Hopefully this provides you the information you need to get Autopilot working in your environment.| As we're focusing on reducing the password surface area we made the assumption your organization have a password replacement offering (e.g. This means - if we don't want to use Forms based authentication, unfortunately, deploying devices with Autopilot in an AD FS environment just isn't possible currently. | So then it seems that either AD FS or Windows 10 haven't been configured to work with MFA in federated environments. The Fingerprint 'Set up' and PIN 'Add' buttons are disabled. Settings panel says *Some settings are hidden or managed by your organization. For one particular domain joined (Windows Server 2016), Windows 10 (1809) computer, I cannot set Windows Hello, PIN, fingerprint.
