This policy setting allows you to control whether a domain user can sign in using a picture password.If you enable this policy setting a domain user can't set up or sign in with a picture password. If you disable or don't configure this policy setting a domain user can set up and use a picture password.Note that the user's domain password will be cached in the system vault when using this feature.
Policy path:
System\Logon
Scope:
Machine
Supported on:
At least Windows Server 2012 Windows 8 or Windows RT
Registry settings:
HKLM\Software\Policies\Microsoft\Windows\System!BlockDomainPicturePassword
Filename:
CredentialProviders.admx