Rotate your device back to portrait to use STIG Vault.
The Windows 10 Security Technical Implementation Guide (V2 R3) has 257 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
Windows 10 v1507 LTSB version does not include this setting; it is NA for those systems.
If the following registry value does not exist or is not configured as specified, this is a finding:
Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures\
Value Name: EnhancedAntiSpoofing
Value Type: REG_DWORD
Value: 0x00000001 (1)
Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Biometrics >> Facial Features >> "Configure enhanced anti-spoofing" to "Enabled".
v1607:
The policy name is "Use enhanced anti-spoofing when available".