Thanks for the answer!
So it basically registers itself as a keyboard?
Even if the Windows PC is locked?
How does it know which password to type?
Unfortunately everything that is more complicated than "take that stick and stick it in the usb port" is gonna be difficult.
I know about the FIDO2 with azure AD, but I need it for on prem AD, which doesn't support fido2.