在 workgroup，Windows Hello 功能是可以正常使用的；
但假如域后，Windows Hello 功能却是灰色的，并提示“Some setting are hidden or managed by your organization.”

Enable Group Policies：
Computer Configuration\policies\administrative Templates\System\Logon\Turn on convenience PIN sign-in Enable

Computer Configuration\policies\administrative Templates\Biometrics
Allow the use of biometrics Enable
Allow users to log on using biometrics Enable
Allow domain users to log on using biometrics Enable

Computer Configuration\policies\administrative Templates\Windows Hello for Business
use a hardware security device Enable
use biometrics Enable
use Windows Hello for business Enable