Do not allow WebAuthn redirection
Description

This policy setting lets you control the redirection of web authentication (WebAuthn) requests from a Remote Desktop session to the local device. This redirection enables users to authenticate to resources inside the Remote Desktop session using their local authenticator (e.g., Windows Hello for Business, security key, or other).

By default, Remote Desktop allows redirection of WebAuthn requests.

If you enable this policy setting, users can't use their local authenticator inside the Remote Desktop session.

If you disable or do not configure this policy setting, users can use local authenticators inside the Remote Desktop session.

Registry Information
Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
Value Name: fDisableWebAuthn
Value Type: REG_DWORD
Enabled Value: 1
Policy Information
Policy Name: TS_WEBAUTHN
ADMX File: TerminalServer.admx
Supported On: At least Windows Server 2019, Windows 10 Version 2004
Loading...
Loading...