Identify how users authenticate on Windows (PIN, fingerprint, facial recognition, password) with PowerShell

In this post I will show a PowerShell script allowing you to monitor Windows authentication usage meaning if your users use PIN, fingerprint, facial recognition or password.

The previous dashboard

In the previous post I shared a Log Analytics dashboard allowing you to monitor Windows authentication usage meaning if your users use WHFB or password.

You can find it there.

In this dashboard you can see if your users use Windows Hello for Business or password.

However it's not detailed meaning you won't which kind of WHfB methods are used (PIN, fingerprint, facial recognition).

The following script will now detailed authentication methods

With this script, when a user logged on his session you will see date and method used (password, code PIN, facial recognition or fingerprint).

Get the script

Click on the below GitHub picture to download the script.

How does it work ?

The script will give the following info:

- Authentication date

- User name

- Method used

See below an overview:

What's next ?

In the next post I will show a Log Analytics dashboard to detailed authentication methods.

It will be a bit like the first dashboard but more detailed.