Ensure Enable ESS with Supported Peripherals is set to Enabled: 1ID: oval:org.secpod.oval:def:94687 | Date: (C)2023-11-22 (M)2023-11-22 |
Class: COMPLIANCE | Family: windows |
Enhanced Sign-in Security isolates Windows Hello biometric (face and fingerprint) template data and matching operations to trusted hardware or specified memory regions. The recommended state for this setting is: Enabled: 1. (Enhanced Sign-in Security Enabled)Fix:(1) GPO: Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Hello for Business\Enable ESS with Supported Peripherals(2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\Biometrics!EnableESSwithSupportedPeripherals
Platform: |
Microsoft Windows 11 |