ADMX Viewer
Microsoft.Policies.SecondaryAuthenticationFactor• Machine

Allow companion device for secondary authentication

This policy allows users to use a companion device, such as a phone, fitness band, or IoT device, to sign on to a desktop computer running Windows 10. The companion device provides a second factor of authentication with Windows Hello. If you enable or do not configure this policy setting, users can authenticate to Windows Hello using a companion device. If you disable this policy, users cannot use a companion device to authenticate with Windows Hello.

Policy Details

Policy Name
MSSecondaryAuthFactor_AllowSecondaryAuthenticationDevice
Registry Key
SOFTWARE\Policies\Microsoft\SecondaryAuthenticationFactor
Value Name
AllowSecondaryAuthenticationDevice
Supported On
At least Windows Server 2016, Windows 10
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-us