Enable ESS with Supported Peripherals: registry value EnableESSwithSupportedPeripheralsComputerHKLM\Software\Microsoft\Policies\PassportForWork\Biometrics
- Policy ID
- MSPassport_EnableEnhancedSignInSecurity
- Scope
- Computer Configuration
- Supported on
- At least Windows 11 Version 22H2
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Windows Hello for Business
Registry
EnableESSwithSupportedPeripherals
REG_DWORDComputer- Enabled value
- Depends on the option value
- Element
- Enable ESS with Supported Peripherals
- Value type
- REG_DWORD
- Minimum value
- 0
- Maximum value
- 1
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Policies\PassportForWork\Biometrics] ; Value names and types follow the ADMX. Replace <enter value> below with your own data "EnableESSwithSupportedPeripherals"=dword:<enter value>
CMD
:: Value names and types follow the ADMX. Replace <enter value> below with your own data reg add "HKLM\Software\Microsoft\Policies\PassportForWork\Biometrics" /v "EnableESSwithSupportedPeripherals" /t REG_DWORD /d "<enter value>" /f
PowerShell
# Value names and types follow the ADMX. Replace <enter value> below with your own data New-Item -Path 'HKLM:\Software\Microsoft\Policies\PassportForWork\Biometrics' -Force | Out-Null New-ItemProperty -Path 'HKLM:\Software\Microsoft\Policies\PassportForWork\Biometrics' -Name 'EnableESSwithSupportedPeripherals' -PropertyType DWord -Value '<enter value>' -Force | Out-Null