如果您的Windows 10 PC 支持 Windows Hello^{(Windows 10 PC supports Windows Hello)}并且您已设置面部识别，则您可以启用增强的反欺骗。Windows Hello是一种基于生物特征的技术，它使用户能够验证他们的身份，以便使用指纹、面部识别或虹膜扫描访问他们的设备、应用程序、网络等。现在， Windows 10^{(Windows 10)}中的人脸检测运行良好，但它无法区分您手机内的人脸照片或实际用户脸。

由于此问题的潜在威胁是，持有您照片的人可以使用他们的手机解锁您的设备。为了克服这个困难，反欺骗技术开始发挥作用，一旦您启用了Windows Hello人脸验证^{(Windows Hello Face Authentication)}的反欺骗，则无法使用真实用户的照片登录PC。

为Hello Face 身份验证^{(Hello Face Authentication)}启用增强的反欺骗^{(Enhanced Anti-Spoofing)}

^(Enhanced)非托管设备不需要针对Windows Hello人脸身份验证的^{(Windows Hello)}增强反欺骗功能，您必须以管理员身份登录才能启用或禁用增强反欺骗功能。去做这个：

打开本地组策略编辑器，然后在本地^{(Local Group Policy Editor)}组策略编辑器的左侧窗格中，导航到以下位置：

Computer Configuration > Administrative Templates > Windows Components > Biometrics > Facial Features.

在本地组策略编辑器的^{(Local Group Policy Editor)}面部特征^{(Facial Features)}右侧窗格中，双击配置增强的反欺骗^{(Configure enhanced anti-spoofing)}策略进行编辑。

This policy setting determines whether enhanced anti-spoofing is required for Windows Hello face authentication.

If you enable this setting, Windows requires all users on managed devices to use enhanced anti-spoofing for Windows Hello face authentication. This disables Windows Hello face authentication on devices that do not support enhanced anti-spoofing.

If you disable or don’t configure this setting, Windows doesn’t require enhanced anti-spoofing for Windows Hello face authentication.

Note that enhanced anti-spoofing for Windows Hello face authentication is not required on unmanaged devices.

如上面的屏幕截图所示，执行以下操作；

禁用 Windows Hello 人脸身份验证的增强反欺骗^{(To Disable Enhanced Anti-Spoofing for Windows Hello Face Authentication)}

• 单击未配置^{(Not Configured)}或禁用^(Disabled)的单选按钮，单击确定。^(OK.)

为 Windows Hello 人脸验证启用增强的反欺骗^{(To Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification)}

• 单击单选按钮Enabled，单击OK。

您现在可以退出组策略编辑器^{(Group Policy Editor)}并重新启动系统。

上述过程不适用于Windows 10 家庭版^{(Home Edition)}，因为家庭^(Home)版中未内置组策略编辑器^{(Group Policy Editor)}。但是，要在家庭^(Home)版上执行相同的程序，请安装 PolicyPlus ^{(install PolicyPlus)}。添加该实用程序后，您现在可以按照与上述相同的步骤启用Windows 10 Home的增强反欺骗^{(Enhanced Anti-Spoofing)}功能。

Enable Enhanced Anti-Spoofing in Windows 10 Hello Face Authentication

If your Windows 10 PC supports Windows Hello and you have set up facial recognition, then you can enable enhanced anti-spoofing. Windows Hello is a biometrics-based technology that enables users to authenticate their identity in order to access their devices, apps, networks, etc using fingerprint, face recognition, or iris scan. Now face detection in Windows 10 works well, but it can’t differentiate between a photo of your face inside your mobile or the actual user face.

The potential threat because of this issue is that someone with your photo could unlock your device by using their mobile. To overcome this difficulty, the anti-spoofing technology comes into action, and once you have enabled the anti-spoofing for Windows Hello Face Authentication, a photo of the authentic user cannot be used to login to the PC.

Enable Enhanced Anti-Spoofing for Hello Face Authentication

Enhanced anti-spoofing for Windows Hello face authentication is not required on unmanaged devices and you must be signed in as an administrator to enable or disable enhanced anti-spoofing. To do this:

Open the Local Group Policy Editor and on the left pane of Local Group Policy Editor, navigate to the following location:

Computer Configuration > Administrative Templates > Windows Components > Biometrics > Facial Features.

On the right pane of Facial Features in Local Group Policy Editor, double-click Configure enhanced anti-spoofing policy to edit it.

This policy setting determines whether enhanced anti-spoofing is required for Windows Hello face authentication.

If you enable this setting, Windows requires all users on managed devices to use enhanced anti-spoofing for Windows Hello face authentication. This disables Windows Hello face authentication on devices that do not support enhanced anti-spoofing.

If you disable or don’t configure this setting, Windows doesn’t require enhanced anti-spoofing for Windows Hello face authentication.

Note that enhanced anti-spoofing for Windows Hello face authentication is not required on unmanaged devices.

As indicated in the screenshot above, do the following;

To Disable Enhanced Anti-Spoofing for Windows Hello Face Authentication

• Click the radio button for Not Configured or Disabled, click OK.

To Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification

• Click the radio button Enabled, click OK.

You can now exit Group Policy Editor and restart your system.

The procedure described above won’t work on Windows 10 Home Edition because Group Policy Editor is not built into Home edition. However, to carry out the same procedure on Home edition, install PolicyPlus. Once you have added the utility, you can now follow the same steps as described above to enable Enhanced Anti-Spoofing for Windows 10 Home.

Related posts

• 为Windows Hello Face Authentication启用Enhanced Anti-Spoofing

• 如何格式化Windows 10计算机

• Windows 10 v 21H1中删除的功能

• 如何启用或Windows 10 Disable Automatic Learning

• 在Windows 10中启用，Disable Data Collection Reliability Monitor

• Windows 10中的Analyze Wait Chain：Identify hung或冷冻过程

• 如何在Windows 10中使用新鲜的Start feature

• Cortana Features，Tips and Tricks在Windows 10

• 如何打开Windows Mobility Centre在Windows 10

• 如何启用或Windows 10 Disable or Application Isolation feature

• Windows 10 1809 更新中的 5 个最佳新功能

• 如何在Windows 10 Task Manager查看Apps的DPI Awareness Mode

• 如何在Windows 10中禁用Windows Mobility Centre

• 如何修复 Windows Hello 指纹在 Windows 10 中不起作用

• 在Windows 10打开或Off Caret Browsing Support

• Windows 10缺少打印机属性Features section

• 如何在Windows 10使用新的Search与屏幕截图功能

• 您需要开始使用的 15 个 Windows 10 新功能

• 新 Windows 10 PC 的基本软件和功能

• 在Windows 10 Hover启用或禁用开放News and Interests