Windows 10: Disable windows hello for a user group

I do have a question around windows hello for business and autopilot/endpoint manager1> whfb currently disabled at Devices > Enrollment > Enroll devices > Windows enrollment > Windows Hello for Business. 2> There are about 200 devices currently in intune aad/intune managed. - windows hellow shouldn't be enable 3> new set of devices needs windows hello enable 4> indetity policy define to enable whfb under device configuration and targeted the new group which needs whfb enable5> the policy dosent always

:)

 

Show Local users and Groups


Hello Frank, and welcome to Ten Forums.

If you have the Windows 10 Home edition, then it will not have Local Users and Groups (lusrmgr.msc) included in it. It's only available in the Pro and Enterprise editions instead.

If you like, you could use step 3 in OPTION THREE of the tutorial below list users in a group.

https://www.tenforums.com/tutorials/6...a.html#option4

 

How to disable Windows Hello

Hi Tom,



Thank you for writing to Microsoft Community Forums.



I understand how frustrating it could be when things do not work the way they are expected to. However, we can try a few steps and see if we can disable Windows Hello permanently, but before we try those steps, may I know:



What is the version of Windows 10 installed on the computer?

Did you notice any changes on the computer prior to this issue?



Troubleshooting methods:



Method 1: Using Group policy settings.

If you are on Windows 10 Pro edition, you can change the group policy settings to disable PIN sign-in option for all users.

• Open the Run dialog box by pressing the Windows key and the R key together.
  
• Type GPEDIT.MSC and hit the Enter key.
  
• Go to Computer Configuration -> Administrative Templates -> System -> Logon.
  
• On the right side, double click on Turn on PIN sign-in and select
  Disabled.
  
• Similarly disable the other Windows Hello options if any.
  
• Exit the Group policy editor and reboot the computer.
  
  
  
  Method 2: Disabling Windows Hello in Registry.
  
  If setting Group policy doesn’t work, you disable the sign in options which should disable
  
  Windows Hello options in all user accounts.
  
  
  

Disclaimer: The registry is a database in Windows that contains important information about system hardware, installed programs and settings, and profiles of each of the user accounts
on the computer. Windows often reads and updates the information in the registry.

Normally, software programs make registry changes automatically. You should not make unnecessary changes to the registry. Changing registry files incorrectly can cause Windows to stop working or make Windows report the wrong information.



Please take a backup of the registry. Follow the steps given in the link below:

How to back up and restore the registry in Windows

• Open the Run dialog box by pressing the Windows key and the R key together.
  
• Type Regedit and hit the Enter key.
  
• When the Registry Editor opens, navigate to the following location:
  
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions.
  
• In the right pane, double click on the DWORD entry named
  value set it to 0.
  
  
  
  The above method will disable Windows Hello for all user accounts. If you want to re-enable
  
  it, change the DWORD entry Value back to
  1.
  
  
  
  Hope it helps.
  
  
  
  Thanks,
  
  Peer Samie
  
  Microsoft Community-Moderator
  

 

Show Local users and Groups

Hey Brink, I was just looking at groups in netplwiz today and I noticed that my user account is just in the Admin group now, it used to be in Users and Admin. I have home, so I can't change it. I don't know how it changed. I guess there's nothing I can do about it. Will it be a problem?
I'm tempted to downgrade to my 8.1 pro and go to 10 pro.