→ 🚀What's New? Explore Lansweeper's Fall 2024 Updates! Fall Launch Blog !

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
edabg
Engaged Sweeper

Hi,

We would like to start using Windows Hello. This means also being able to login in Windows or unlock a system with biometrics: fingerprint and/or facial recognition.

Not all laptops have the hardware onboard required to do this: a fingerprint scanner or an infrared camera.

Is there a way for us to use Lansweeper to find all systems with built-in fingerprint scanners and infrared cameras? I can't seem to find it.

Thanks!

1 ACCEPTED SOLUTION
jduke_halls
Engaged Sweeper III

Here's one for you using the PNP Drivers BIOMETRIC class to find anything that qualifies as a Biometric sensor (it picks up Windows Hello compatible cameras too)

 

Select Top 1000000 a.AssetID,
  a.AssetName,
  a.Domain,
  a.Username,
  a.Userdomain,
  Coalesce(os.Image, [at].AssetTypeIcon10) As icon,
  a.IPAddress,
  ipl.IPLocation,
  ac.Manufacturer,
  ac.Model,
  os.OSname As OS,
  a.SP,
  a.Lastseen As [Last successful scan],
  a.Lasttried As [Last scan attempt],
  pnpdu.DeviceName,
  pnpdu.Description,
  pnpd.FriendlyName,
  pnpdu.DeviceClass,
  pnpdu.DriverProviderName,
  pnpd.DriverVersion,
  pnpd.HardwareID,
  pnpd.PDO,
  pnpd.DeviceID
From tblAssets a
  Left Join tblAssetCustom ac On ac.AssetID = a.AssetID
  Inner Join tblPnPSignedDrivers pnpd On a.AssetID = pnpd.AssetID
  Inner Join tblPnPSignedDriversUni pnpdu On pnpd.PnPSignedDriverUniID =
      pnpdu.PnPSignedDriverUniID
  Left Join tsysAssetTypes [at] On [at].AssetType = a.Assettype
  Left Join tsysIPLocations ipl On a.IPAddress = ipl.IPLocation
  Left Join tsysOS os On os.OScode = a.OScode
  Left Join tblState st On st.State = ac.State
Where pnpdu.DeviceClass = 'BIOMETRIC' And pnpd.PDO Is Not Null And
  pnpd.PDO <> '' And Lower(st.Statename) = 'active'
Order By a.Domain,
  a.AssetName,
  pnpdu.DeviceClass,
  pnpdu.DeviceName

 

View solution in original post

3 REPLIES 3
jduke_halls
Engaged Sweeper III

Here's one for you using the PNP Drivers BIOMETRIC class to find anything that qualifies as a Biometric sensor (it picks up Windows Hello compatible cameras too)

 

Select Top 1000000 a.AssetID,
  a.AssetName,
  a.Domain,
  a.Username,
  a.Userdomain,
  Coalesce(os.Image, [at].AssetTypeIcon10) As icon,
  a.IPAddress,
  ipl.IPLocation,
  ac.Manufacturer,
  ac.Model,
  os.OSname As OS,
  a.SP,
  a.Lastseen As [Last successful scan],
  a.Lasttried As [Last scan attempt],
  pnpdu.DeviceName,
  pnpdu.Description,
  pnpd.FriendlyName,
  pnpdu.DeviceClass,
  pnpdu.DriverProviderName,
  pnpd.DriverVersion,
  pnpd.HardwareID,
  pnpd.PDO,
  pnpd.DeviceID
From tblAssets a
  Left Join tblAssetCustom ac On ac.AssetID = a.AssetID
  Inner Join tblPnPSignedDrivers pnpd On a.AssetID = pnpd.AssetID
  Inner Join tblPnPSignedDriversUni pnpdu On pnpd.PnPSignedDriverUniID =
      pnpdu.PnPSignedDriverUniID
  Left Join tsysAssetTypes [at] On [at].AssetType = a.Assettype
  Left Join tsysIPLocations ipl On a.IPAddress = ipl.IPLocation
  Left Join tsysOS os On os.OScode = a.OScode
  Left Join tblState st On st.State = ac.State
Where pnpdu.DeviceClass = 'BIOMETRIC' And pnpd.PDO Is Not Null And
  pnpd.PDO <> '' And Lower(st.Statename) = 'active'
Order By a.Domain,
  a.AssetName,
  pnpdu.DeviceClass,
  pnpdu.DeviceName

 

ulicorreia
Engaged Sweeper

Did you even get an answer for this? I want to do this now as well.

I'm afraid nobody replied. I ended up grouping the clients per model and that way assuming that each client of the same model had the same relevant hardware for biometrics. It's not a perfect solution but it was enough.

I do think it's possible to get this info out of Lansweeper, but you'll need to go through the tables in the database at least, or maybe even add a custom regkey scan. I do think that I saw something with the infrared webcam presenting itself as a separate device (which is pretty obvious in fact), so listing devices with more than one webcam should give you an idea as well.

I didn't investigate further as I wanted to push through with Hello anyway. Users can always fall back on the PIN-code, so biometrics is not a must.