Windows 10 anniversary update 1607, domain account, Windows Hello, PIN and fingerprint login disabled

Made a clean install of Windows 10 v1607 to my laptop, joined it to a domain, logged in as a domain user. Tried to enable PIN login and fingerprint login, but the options were greyed out.
In GPEDIT.msc I enabled the use of biometrics under Local Computer Policy, Computer Configuration, Administrative Templates, Windows Components, Windows Hello for Business, Use Biometrics.
I also created a new registry entry in [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] "AllowDomainPINLogon"=dword:00000001

Rebooted, logged in as a domain user and now I can add PIN and fingerprints.