ID #1032 Enable Windows Hello Biometric Active Directory Logon for Windows Server without Azure AD ~ 0 min Mike Waldron 2021-02-01 12:31 PDF version Set the following items on a group policy for an OU containing the computers you want to allow, i.e. TLD.local/Org/Workstations Note that users MUST set up a Windows PIN before biometric methods can be used.