diff --git a/windows/security/identity-protection/hello-for-business/configure.md b/windows/security/identity-protection/hello-for-business/configure.md index 38a8b93fdf..a7b156eae3 100644 --- a/windows/security/identity-protection/hello-for-business/configure.md +++ b/windows/security/identity-protection/hello-for-business/configure.md @@ -102,12 +102,12 @@ Windows Hello for Business is enabled by default for devices that are Microsoft - Provision the devices using a provisioning package that disables Windows Hello for Business. For more information, see [Provisioning packages for Windows](/windows/configuration/provisioning-packages/provisioning-packages) - Scripted solutions that can modify the registry settings to disable Windows Hello for Business during OS deployment -| Policy type | Registry path | Value | -|-|-|-| -| CSP (user)| `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Policies\PassportForWork\\UserSid\Policies`| `UsePassportForWork`
- DWORD `0` to Disable
- DWORD `1` to Enable| -| CSP (device)| `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Policies\PassportForWork\\Device\Policies`| `UsePassportForWork`
- DWORD `0` to Disable
- DWORD `1` to Enable| -| GPO (user)| `HKEY_USERS\\SOFTWARE\Policies\Microsoft\PassportForWork`| `Enabled`
- DWORD `0` to Disable
- DWORD `1` to Enable| -| GPO (device)| `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork`| `Enabled`
- DWORD `0` to Disable
- DWORD `1` to Enable| +| Setting | +|--| +| CSP (user)
**Key path**: `HHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Policies\PassportForWork\\UserSid\Policies`
**Key name**: `UsePassportForWork`
**Type**: `REG_DWORD`
**Value**:
 `1` to enable
 `0` to Disable | +| CSP (device)
**Key path**: `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Policies\PassportForWork\\Device\Policies`
**Key name**: `UsePassportForWork`
**Type**: `REG_DWORD`
**Value**:
 `1` to enable
 `0` to Disable | +| GPO (user)
**Key path**: `HKEY_USERS\\SOFTWARE\Policies\Microsoft\PassportForWork`
**Key name**: `Enabled`
**Type**: `REG_DWORD`
**Value**:
 `1` to enable
 `0` to Disable | +| GPO (user)
**Key path**: `KEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork`
**Key name**: `Enabled`
**Type**: `REG_DWORD`
**Value**:
 `1` to enable
 `0` to Disable | > [!NOTE] > If there's a conflicting device policy and user policy, the user policy takes precedence. It's not recommended to create Local GPO or registry settings that could conflict with an MDM policy. This conflict could lead to unexpected results.