Do not allow WebAuthn redirection

This policy setting lets you control the redirection of web authentication (WebAuthn) requests from a Remote Desktop session to the local device. This redirection enables users to authenticate to resources inside the Remote Desktop session using their local authenticator (e.g., Windows Hello for Business, security key, or other). By default, Remote Desktop allows redirection of WebAuthn requests. If you enable this policy setting, users can't use their local authenticator inside the Remote Desktop session. If you disable or do not configure this policy setting, users can use local authenticators inside the Remote Desktop session.

Policy Details

Policy Name

TS_WEBAUTHN

Registry Key

SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services

Value Name

fDisableWebAuthn

Supported On

At least Windows Server 2019, Windows 10 Version 2004

OMA-URI (CSP)

RemoteDesktopServices/DoNotAllowWebAuthnRedirection

OS Build Version:10.0.22621

CSP Version:11.0

Conflict Resolution:LastWrite

Allowed Editions:

EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterprisesevalWnc

Policy State Values

Enabled: 1

Disabled: 0

Available Languages

en-us