Microsoft Passport for Work is an alternative method for signing into Windows using your Active Directory or Azure Active Directory account that can replace passwords, Smart Cards, and Virtual Smart Cards.
If you do not configure this policy setting, users can provision Microsoft Passport for Work which encrypts their domain password.
If you enable this policy, the device provisions Microsoft Passport for Work using keys or certificates for all users.
If you disable this policy setting, the device does not provision Microsoft Passport for Work for any user.
| Registry Hive | HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER |
| Registry Path | SOFTWARE\Policies\Microsoft\PassportForWork |
| Value Name | Enabled |
| Value Type | REG_DWORD |
| Enabled Value | 1 |
| Disabled Value | 0 |