1. “Turn on Convenience PIN sign-in” policy (as above) must be enabled
2. All 3 Policies under Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business\ must be in the state “Not configured”.
Open RUN and type gpedit.msc
Go into sub direcotires:
Computer Configuration > Window Components > Biometrics
And Enable there values.
Open RUN and type regedit
Goto : Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
Right Click and Add “AllowDomainPINLogon” named DWORD 32 BIT file and put 1 value in it.
Now, under Settings > Sign-in options, both Fingerprint “Set up” and PIN “Add” buttons are grayed out
Click on Fingerprint “Set up”.
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] “AllowDomainPINLogon”=dword:00000001
Note : After the policy changes and a restart, PIN and fingerprint options were available.