Managing Biometrics Windows Server 2. R2. Introduction. Biometric Software Windows 7' title='Biometric Software Windows 7' />The changes to the Windows 7 interface have gotten a lot of play, but some of the new builtin tools are just as compelling. Deb Shinder runs through some of the most. Biometric-devices-400x373.jpg' alt='Biometric Software Windows 7' title='Biometric Software Windows 7' />Welcome to BiometricUpdate. Find companies and search this page to get more acquainted with. Weve known for a long time that the traditional user name and password authentication method, alone, doesnt provide the best security. It can be made better by instituting length and complexity requirements and setting expiration periods, and Windows domain administrators have been able to do this through Group Policy settings since Windows NT. But multi factor authentication will always be better, and arguably the best method of positively authenticating a person is via fingerprints and other unique physical characteristics. Yes, it is possibly to spoof biometric information, but its difficult. You cant share a biometric identifier as you can a password or make a copy of it as you can with a card or token. Another advantage is that its always with you you cant lose it or leave it behind when you need it. The problem with using biometrics for system or domain logon is that until recently, there was no built in support in either Windows Server or the Windows client operating systems for using or managing biometrics. You had to use third party software, and there was little consistency or interoperability across biometrics programs. Every device vendor provided its own proprietary drivers, client software, SDK, management tools, etc. The good news is that thats changed. Windows 7 and Windows Server 2. R2 include the Windows Biometric Framework WBF, which provides native support for biometric technologies, specifically fingerprint devices. Biometric identification systems and biometric devices including fingerprint scanners, iris recognition technology, time clock software and access control systems. Sonic Before The Sequel Download more. Windows 7 codenamed Vienna, formerly Blackcomb is a personal computer operating system developed by Microsoft. It is a part of the Windows NT family of operating. Improve performance by disabling Windows 7 services. Windows 7 loads many services at startup, most of them are essential for the core system features. Fingerprint, face, iris, voice and multibiometric product brochures, 30day SDK and component trials, biometric algorithm demo applications and databases. WBF Components. WBF consists of several components Driver interface definition, Windows Biometric Driver Interface WBDI, through which user applications can interact with biometric devices. Windows Biometric Service WBS, for managing fingerprint devices and operating between the software application and the biometric device to keep the biometric data separate from the client application. Pluggable expansion platform. Client API, through which applications enroll, identify and verify user identities. User experience components. Management components for local configuration or centralized domain wide configuration, including the Biometrics Devices Control Panel and the Biometrics category in Device Manager, Group Policy. Distribution component, including ability of vendors to distribute WBF drivers and components through Windows Update. Developers can find out more about the Windows Biometric Framework API and how to use it here. Biometric Scenarios. The two standard supported scenarios for Windows 7 client computers include biometric logon to local computer or domain and elevation of privileges through UAC by biometrics. For the extra security of strong multi factor authentication, the fingerprint template can even be stored on a smart card and used to authenticate the owner of the card, integrating with third party solutions such as Protiva. NET Bios Match on Card technology where the fingerprint verification is performed on the card. Read more about that here. Enabling Biometric Logon in Windows 7. To set up biometric fingerprint logon to a Windows 7 computer, you first need a fingerprint reader. This can be an add on device, or a reader that comes built in as is the case with many modern laptops. The proper drivers for the device must be installed. Windows 7 comes with drivers for a number of biometric devices. If yours isnt one of them, Windows will attempt to find the correct drivers on the Windows Update site. If that doesnt work, check the web site of the device vendor or the computer vendor for built in devices. Once the drivers are installed, the next step is to set up the biometric software with your fingerprint data. Follow these steps Log on to the user account with which you want to use biometric logon. Click Start Control Panel. In Classic View, click the Biometric Devices applet. If you dont see this applet, check Device Manager to ensure that your biometric device is listed. In the dialog box, click Use your fingerprint with Windows. Next, youll be asked to provide your password. Do so and click OK. The Fingerprint Reader enrollment dialog box requests that you click the finger you want to set up. You can set up one, some or all of your fingers. Its usually a good idea to set up more than one, as sometimes the reader may not recognize one of your fingers perhaps because its dirty or oily or injured but will recognize a different finger. Next youll be asked to swipe the finger on the reader so the reader can get a good reading. A successful swipe will result in a green checkmark an unsuccessful swipe will result in a red X. Youll need three successful swipes to proceed. After three successful swipes, youre notified that the finger is set up for logon and access functions and you can click Finish. You can repeat the process to enroll other fingers. Now you need to test and ensure that the fingerprint logon works. Log off or lock the computer. Instead of your photo  and a credentials box for entering your password, youll now see a fingerprint icon, as fingerprint logon has been set as the default logon method. Dont worry if it doesnt work, you can click the Other credentials button and log on with your username and password as usual. Swipe one of the fingers that you set up and the system should log you on. Managing Biometrics in a Windows Server 2. R2 Domain. Administrators can enable, limit or block the use of biometric devices in a Windows Domain by using Group Policy. In the Group Policy Management Editor on Windows Server 2. R2, in the left pane right click the Group Policy Object GPO you want to configure for example, the default domain policy and select Edit, as shown in Figure 1. Figure 1. In the left pane, expand Policies, then Administrative Templates Policy definitions, then Windows Components, and click Biometrics as shown in Figure 2. Figure 2. In the right pane, youll see four choices Allow the use of biometrics. Allow users to log on using biometrics. Allow domain users to log on using biometrics. Timeout for fast user switching events. Note that this same Group Policy settings are available in the Local Group Policy Editor on Windows 7 and Windows Server 2. R2 computers. The permissions and behaviors of biometrics can be configured in the local policy however, domain policy will override local policy. Allow the Use of Biometrics. If you enable the Allow the use of biometrics policy setting, this makes the Windows Biometric Service available to user applications. This means users will be able to run biometric applications on their Windows 7 clients or on Windows Server 2. R2 servers. This setting does not enable users to log on with biometric data it only allows them to run the biometric enabled applications. If the policy is not configured, WBS will still be available, as that is the default. If you dont want it to be available thus prohibiting users from running biometric applications, you need to explicitly disable this policy setting. This prevents users from using any of the biometric features in Windows 7 and Windows Server 2. R2. To enable or disable the policy setting, double click it or right click it and select Edit. There you have three option buttons Not Configured, Enabled and Disabled. Click the one you want and then click Apply and OK. Allow users to log on using biometrics. If you enable the Allow users to log on using biometrics policy setting, users will be able to log onto their computers by swiping a finger. Active Fuel Injector Tester Update. Suicide 23 Minutes Over Brussels on this page.