Enhanced Sign-in Security isolates Windows Hello biometric (face and fingerprint) template data and matching operations to trusted hardware or specified memory regions. The recommended state for this setting is: Enabled: 1. (Enhanced Sign-in Security Enabled)Fix:(1) GPO: Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Hello for Business\Enable ESS with Suppor ...