Enable Windows Hello via Group Policy

I'm an odd fella, in the fact that I have a Active Directory server running in my dorm. But hey, you got to learn somehow, right?

I waited awhile to bind my desktop to my domain, but after doing so I noticed that my Intel Realsense wouldn't work for my domain bound accounts. Obviously no one wants to spend the 5 secs it takes to type in a password, so here is what you need to do.

First, if you haven't already, make sure you have the latest Windows 10 ADMX installed on your Domain Controller. You can find them here.

As for actual things to enable, here are the items you need enabled in group policy for it to work:

In "Computer Configuration\Administrative Templates\System\Logon\", make sure you have "Turn on PIN sign-in" enabled.

Under "Computer Configuration\Administrative Templates\Windows Components\Biometrics\", enable "Allow the use of biometrics", "Allow users to log on using biometrics", and "Allow domain users to log on using biometrics"

You should be good to go!