I have an HP laptop with a fingerprint reader. Running Win7 RC I was abl to enroll my fingerprints with ease. Howevr when I try to login to my machine I get the error "fingerprint logon is not enabled for domain accounts on this machine". I assume this is a group policy setting? Can anyone tell me what that setting is? I can't imagine my IT dept has it turned off, in fact I have seen others in my company login via fingerprint.Any ideas?

There is a new group policy setting:Computer Confguration / Administrative Templates / Windows Components / Biometrics / Allow domain users to logon on using biometricsBy default domain users are not allowed to logon using biometrics.Ray

Unfortunately if you're not a GP admin for the Domain you cannot make those changes - even if the template was loaded ...Does anyone know if there isa local setting that will allow this override (like maybe an entry in the registry...), since the templates this office is using don't incorporate the Vista enhancements, much less Windows7.Craig

This depends on how your system admin setup Group Policy for the systems in your domain.If he enabled the following GP setting Computer Confguration / Administrative Templates / System / Group Policy / Turn off Local Group Policy objects processing, Local Group Policy settings will be ignored by your system. In this case you have to ask the GP admin for the domain to help you out.If your system admin did not disable Local Group Policy processing, then the Group Policy setting for biometrics I mentioned earlier will be undefined and can be set using the Local Group Policy editor (gpedit.msc). Ray

Hi, thanks for helping. I have similar configuration and changed logon group policy. But now I have new problem, when I try to logon, Windows 7 says: Your fingerprints have not been enrolled for logon. To logon using fingerprints, select the fingerprint logon tile(What logon tile??)and then type your password. Well, I typed my password in Control Panel/Biometric Devices/Manage your fingerprint data, but it doesn't help.Any ideas?Thanks.

Nevermind, it started to work somehow :).

I had the same problem (but with a ThinkPad w500) on Win7 RC1. The problem is actually quite simple to solve, once you know where to look of course... ;) It does not involve Group Policy settings - even though the setting can be controlled via that approach, but its not per default. Goto: Control Panel\All Control Panel Items\Biometric Devices Click: Change Biometric Settings Click both: Allow users to log on to Windowsd using their fingerprints and Allow users to log on to a domain using their fingerprints Restart the computer. Click: 'Switch user' at the log on screen and choose the fingerprint icon (this of course requires you to first have added a set of fingerprints to your account) Swipe your finger. At this point nothing happens (or at least it didn't for me). The screen remained active with the fingerprint icon and a password field. Now type your password and your'e logged on (I guess this i a final security measure to validate the account against the AD). Now restart your computer and voila! your fingerprint is accepted and password no longer required. Hope this helpes...

Thanks. Worked for me.

Does anyone know why in my fresh install of Small Business Server 2008 when I go to the above, there's no Biometrics under Windows Compents? checked everywhere it doesn't have Biometrics anywhere in GP...