This policy setting determines whether enhanced anti-spoofing is configured for devices which support it.
If you do not configure this policy setting, users will be able to choose whether or not to use enhanced anti-spoofing on supported devices.
If you enable this policy setting, Windows will require all users on the device to use anti-spoofing for facial features, on devices which support it.
If you disable this policy setting, enhanced anti-spoofing is turned off for all users on the device and they will be unable to turn it on.
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures |
| Value Name | EnhancedAntiSpoofing |
| Value Type | REG_DWORD |
| Enabled Value | 1 |
| Disabled Value | 0 |