English Community

ThinkPad NotebooksThinkPad: X Series Laptops
All Forum Topics
Options

4 Posts

10-21-2019

US

4 Signins

103 Page Views

  • Posts: 4
  • Registered: ‎10-21-2019
  • Location: US
  • Views: 103
  • Message 1 of 6

Windows Hello not working on ThinkPad X1 Carbon 7th Gen

2019-10-21, 16:28 PM
  • Brand new Carbon X1 7th Gen (20QD)
  • IR Camera / Fingerprint Reader
  • Windows 10 Pro (ver. 1903)
  • Connected to Domain

Followed the steps listed that worked for others:

  • Computer configuration> Administrative Templates> System> Logon> Turn on convenience PIN sign-in

  • Computer configuration> Administrative Templates> Windows Components> Windows Hello for Business> Use Biometrics

  • Computer configuration> Administrative Templates> Windows Components> Windows Hello for Business> Use Windows Hello for Business

  • [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]

    "AllowDomainPINLogon"=dword:00000001

 

Still all "Windows Hello" sign-in options greyed out. 

 

I have installed all Windows updates and updated all drivers. 

 

As a test I disconnected from the domain and created a local account to verify the IR camera and the fingerprint hardware is working normally. So this does have something to do with the domain policies, but no idea which others to edit to fix what is is controlling this lockout. I have also attached a screenshot.

 

 

 

 

Any and all help apprecated. Thank you. 

John

 

 

******The Fix:

 

Well I figured it out. Doesn't make much sense to me, and of course this probably wont work for everyone.

 

I remembered that I had this same issue with my Carbon X1 6th Gen. way back when. Since I handed that machine down to one of my estimators, I went back and looked at the GP and Reg. settings I had figured out on that machine to get Hello to work and applied them to my new 7th Gen.

 

What do you know everything now works! 

 

 

The fix to enable Hello only required three changes:

 

Step 1:

Computer Configuration\Administrative Templates\System\Logon

  • Turn on convenience PIN sign-in (Enabled)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Step 2:

Computer Configuration\Administrative Templates\Windows Components\Biometrics

  • Allow domain users to log on using biometric (Enabled)

 

 

 

 

 

 

 

 

 

Step 3:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"AllowDomainPINLogon"=dword:00000001 

 

 

Result:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Nothing changed in "Windows Hello for Business"

  • (pic for reference)

 

 

 

 

Solved! See the solution
Reply
Options

8 Posts

05-19-2016

NL

17 Signins

246 Page Views

  • Posts: 8
  • Registered: ‎05-19-2016
  • Location: NL
  • Views: 246
  • Message 2 of 6

Re: Windows Hello not working on ThinkPad X1 Carbon 7th Gen

2019-10-21, 17:37 PM

Check this list. It worked here after applying all. Looks like some are missing.

 

  • Computer Configuration\Administrative Templates
    • \System\Logon
      • Turn on conveniece PIN sing-in (Enable)
    • \Biometrics
      • Allow the use of biometrics (Enable)
      • Allow users to log on using biometrics (Enable)
      • Allow domain users to log on using biometrics (Enable)
    • \Windows Hello for Business
      • Use a hardware security device (Enable)
      • Use biometrics (Enabled)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"AllowDomainPINLogon"=dword:00000001 

Reply
Options

4 Posts

10-21-2019

US

4 Signins

103 Page Views

  • Posts: 4
  • Registered: ‎10-21-2019
  • Location: US
  • Views: 103
  • Message 3 of 6

Re: Windows Hello not working on ThinkPad X1 Carbon 7th Gen

2019-10-21, 18:26 PM

Still not working. I enabled "Use a hardware security device" in "Windows Hello for business". Windows Hello sign in options still showing greyed out.

 

Screen shots below. 

 

  • Computer Configuration\Administrative Templates
    • \System\Logon
      • Turn on conveniece PIN sing-in (Enable)

 

  • \Biometrics
    • Allow the use of biometrics (Enable)
    • Allow users to log on using biometrics (Enable)
    • Allow domain users to log on using biometrics (Enable)

 

  • \Windows Hello for Business
    • Use a hardware security device (Enable)
    • Use biometrics (Enabled)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"AllowDomainPINLogon"=dword:00000001 

 

 

 

Reply
Options

4 Posts

10-21-2019

US

4 Signins

103 Page Views

  • Posts: 4
  • Registered: ‎10-21-2019
  • Location: US
  • Views: 103
  • Message 4 of 6

Re: Windows Hello not working on ThinkPad X1 Carbon 7th Gen

2019-10-22, 14:00 PM

Well I figured it out. Doesn't make much sense to me, and of course this probably wont work for everyone.

 

I remembered that I had this same issue with my Carbon X1 6th Gen. way back when. Since I handed that machine down to one of my estimators, I went back and looked at the GP and Reg. settings I had figured out on that machine to get Hello to work and applied them to my new 7th Gen.

 

What do you know everything now works! 

 

 

The fix to enable Hello only required three changes:

 

Step 1:

Computer Configuration\Administrative Templates\System\Logon

  • Turn on convenience PIN sign-in (Enabled)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Step 2:

Computer Configuration\Administrative Templates\Windows Components\Biometrics

  • Allow domain users to log on using biometric (Enabled)

 

 

 

 

 

 

 

 

Step 3:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"AllowDomainPINLogon"=dword:00000001 

 

Result:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Nothing changed in "Windows Hello for Business"

  • (pic for reference)

 

 

 

0 person found this solution to be helpful.

This helped me too

Reply
Options

4 Posts

10-21-2019

US

4 Signins

103 Page Views

  • Posts: 4
  • Registered: ‎10-21-2019
  • Location: US
  • Views: 103
  • Message 5 of 6

Re: Windows Hello not working on ThinkPad X1 Carbon 7th Gen

2019-10-22, 14:08 PM

Well I figured it out. Doesn't make much sense to me, and of course this probably wont work for everyone.

 

I remembered that I had this same issue with my Carbon X1 6th Gen. way back when. Since I handed that machine down to one of my estimators, I went back and looked at the GP and Reg. settings I had figured out on that machine to get Hello to work and applied them to my new 7th Gen.

 

What do you know everything now works! 

 

 

The fix to enable Hello only required three changes:

 

Step 1:

Computer Configuration\Administrative Templates\System\Logon

  • Turn on convenience PIN sign-in (Enabled)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Step 2:

Computer Configuration\Administrative Templates\Windows Components\Biometrics

  • Allow domain users to log on using biometric (Enabled)

 

 

 

 

 

 

 

 

 

Step 3:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"AllowDomainPINLogon"=dword:00000001 

 

 

Result:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Nothing changed in "Windows Hello for Business"

  • (pic for reference)

 

 

 

Reply
Options

2 Posts

12-07-2019

US

5 Signins

55 Page Views

  • Posts: 2
  • Registered: ‎12-07-2019
  • Location: US
  • Views: 55
  • Message 6 of 6

Re: Windows Hello not working on ThinkPad X1 Carbon 7th Gen

2019-12-07, 11:56 AM

This on also does not work for me. I tried to search on googld but seems no way to solve that matter:( Any other suggestion?

Reply
Forum Home

Community Guidelines

Please review our Guidelines before posting.

Learn More

Check out current deals!

Go Shop
X

Save

X

Delete