How to set automatically dismissing the lock screen if Windows recognizes your face. Want instant access? This video breaks down the essential steps to automatically dismiss the lock screen if Windows recognizes your face. We cover options from simple settings changes to complex enterprise deployment methods. Before we begin, be sure to subscribe to NinjaOne's IT Video Hub and our YouTube channel for more tech content like this. Optimizing Windows Hello: instant access versus security. The decision to automatically dismiss the lock screen is a critical balance between user experience and security. For high-risk or shared environments, IT managers may prefer to disable this feature to enforce a required PIN or password on top of facial recognition. For personal devices, enabling it delivers maximum speed. We have three distinct methods to cater to both individual users and enterprise deployments. You'll need Windows Hello face recognition already enabled, and system access is required for enterprise methods. Individual configuration via Windows Settings. Our first method is the simplest, best for personal devices or remote configuration. Method one: Windows Settings. First, open Settings by pressing Win + I. Navigate to Accounts, arrow, Sign-in options. Under Facial recognition , look for the toggle Automatically dismiss the lock screen if "Windows Hello" recognizes your face. Switching this on will log you in instantly after recognition. Switching it off will require a PIN or password for an extra layer of security. This is the fastest way to adjust the setting. Enterprise deployment via Registry and PowerShell. For system-wide changes, IT managers can use the Registry or PowerShell. Method two: Windows Registry. This is used for enterprise deployments and requires a bit more technical setup. First, run the command whoami /user in Command Prompt to find the active user's security identifier, or SID. Next, open the registry editor, regedit. Navigate to the FaceLogon path for the user's SID. Finally, find or create the DWORD value named AutoDismissOn. Set the value data to one to enable auto dismissal, or zero to disable it. Remember to back up your registry before making changes. Method three: PowerShell script. This is ideal for automation and RMM scripting. You can use two simple commands run as administrator to enable or disable the setting by writing the value of one, enable, or zero, disable, directly to the registry path. We've included the exact scripts in the full blog post linked below. Risks, best practices, and troubleshooting. Before deploying, be aware of key considerations and best practices. Device wake behavior: prevent unintentional unlocks by combining this setting with a strong Require sign-in after sleep policy. Deployment conflicts: ensure your configurations do not conflict with existing GPO or MDM policies. Test in pilot groups first. Policy enforcement: since there is no official GPO for this specific setting, use registry or script-based deployment methods for enforcement. Security recommendation: only enable auto dismissal in secure environments where the speed benefit outweighs the security risk of bypassing an additional authentication step. Optimizing your Windows Hello access involves balancing speed against security, a choice fully managed by the auto dismissal setting. While instant access improves workflow, remember that enabling this feature bypasses a traditional security layer. To mitigate risk, always implement best practices, such as combining it with a strict policy to require sign-in after sleep. For more information, check out our official blog post on how to set automatically dismissing the lock screen if Windows recognizes your face, linked in the description below.