Disable: 'Use biometrics' Microsoft Passport for Work enables users to use biometric gestures, such as face and fingerprints, as an alternative to the PIN gesture. However users must still configure a work PIN to use in case of failures. If you enable this policy setting, Microsoft Passport for Work allows the use biometric gestures on. If you disable this policy setting, Microsoft Passport for Work prevents the use of biometric gestures. If you do not configure this policy setting, Microsoft Passport for Work allows the use of biometric gestures. NOTE: Disabling this policy prevents the user of biometric gestures on the device for all account types. Counter Measure: Configure this setting depending on your organization's requirements. Potential Impact: Certain devices may not support biometric gestures.

(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Microsoft Passport for Work\Use biometrics (2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WinBio\Credential Provider\Domain Accounts