Windows Biometric Framework management

  • Article

This topic describes how you can manage the Windows Biometric Framework (WBF).

This information applies to the following operating system:

  • Windows 7

In Windows 7, the biometric attributes of individual devices or the entire system can be managed through either of the following:

  • Biometric Device Control Panel
  • Biometrics System Management

Biometric Device Control Panel

The Windows Biometric Device Control Panel gives users basic capabilities for biometrics management on the local system. Specifically, users can do the following:

  • Delete personally identifiable information such as fingerprint templates and password data.
  • Access Device Manager for troubleshooting fingerprint biometric devices.
  • Manage biometric settings, including the following:
    • Enable/disable biometrics.
    • Enable/disable local logon.
    • Enable/disable domain logon.

To change biometric settings, the user must have administrative credentials.

Biometrics System Management

In addition to the local management of biometrics capabilities through the Biometric Device Control Panel, a user can control the following aspects of biometrics in a domain by using Group Policy:

  • Enable/disable biometrics.
  • Enable/disable local logon.
  • Enable/disable domain logon.
  • Set time-out for Fast User Switching (FUS).

Note  

FUS works only if an IHV or ISV implements it.

 

Together with these settings, system administrators can use the following Group Policy capabilities to manage fingerprint biometric devices in their environments:

  • Prevent biometric device installation.
  • Force the removal of drivers for specific fingerprint biometric devices.
  • Disable WBS.

System administrators can also perform specific tasks that are related to biometrics by using logon scripts.

Introduction to the Windows Biometric Framework

 

 

Send comments about this topic to Microsoft