Windows Biometric Framework Registry Key Location

The Windows Biometric Framework (WBF) manages biometric devices, such as fingerprint scanners and facial recognition cameras, across the operating system. In the Windows Registry (regedit), the core configuration and policy settings for WBF are primarily located under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics. This article outlines the primary registry paths used to manage biometric operations, credential provider behaviors, and the underlying background service.

Primary Policy Registry Key

The main registry key that governs system-wide policies for the Windows Biometric Framework is:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics

Administrators use this location to enable or disable biometric functionality across the device via registry scripts or Group Policy.

Key Values Under \Biometrics

• Enabled (DWORD)
  • 1 = Biometrics allowed (Default)
  • 0 = Biometrics disabled system-wide

Credential Provider Subkey

To manage how biometrics interact with Windows sign-in and user authentication, settings are stored within the Credential Provider subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\Credential Provider

Key Values Under \Credential Provider

• Enabled (DWORD)
  • 1 = Allow users to log on to the local computer using biometrics.
  • 0 = Disallow biometric logon.
• Domain Accounts (DWORD)
  • 1 = Allow domain users to log on using biometrics.
  • 0 = Prevent domain accounts from using biometrics.

Facial Features Subkey (Windows Hello Face)

For systems utilizing facial recognition, configuration policies are located under:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\Facial Features

• EnhancedAntiSpoofing (DWORD)
  • 1 = Require enhanced anti-spoofing for facial recognition hardware.
  • 0 = Standard facial recognition.

Windows Biometric Service (WbioSrvc) Key

The operational configuration for the Windows Biometric Service itself is stored under the system services registry path:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WbioSrvc

• Start (DWORD)
  • 2 = Automatic startup
  • 3 = Manual startup (Default on many client systems)
  • 4 = Disabled

How to Modify WBF Settings in Regedit

1. Press Win + R, type regedit, and press Enter.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft.
3. If the Biometrics key does not exist, right-click Microsoft, select New > Key, and name it Biometrics.
4. Inside the Biometrics key, create the required DWORD (32-bit) Value (e.g., Enabled).
5. Set the value data accordingly, click OK, and restart the computer or restart the WbioSrvc service to apply the changes.