Although GPO can manage this setting, by default it is off. To get your Windows 7 systems to allow domain user login using biometrics (fingerprint) support follow the directions below.
Adding Domain log on access for Biometrics
Goto -> Control Panel ->All Control Panel Items ->Biometric Devices
Select: Change Biometric Settings
Select both:
Allow users to log on to Windowsd using their fingerprints
and
Allow users to log on to a domain using their fingerprints
Restart the computer.
Select: ‘Switch user’ at the log on screen and choose the fingerprint icon ( requires you to have first added a set of fingerprints to your account)
Swipe your finger. At this point nothing happens. The screen remained active with the fingerprint icon and a password field.
Now type your password and your’e logged on (this is the final security measure to validate the account against the AD).
Now restart your computer and Bingo! your fingerprint is accepted and password no longer required.
Enjoy the ease of biometrics with Windows 7