Windows 10: Disable Windows Hello for Business for one user

Morning All,I hope you are all doing well.I would like to disable the Windows Hello for Business for one user. I know how to disable this globally in Azure but not sure how or if this is possible. I would appreciate any help/ advise.Many ThanksJames

:)

 

Can't disable Windows Hello for Business

I receive this error in Event Viewer whenever I boot Windows 10 Pro version 1709 build 16299.309.

Windows Hello for Business provisioning will not be launched.

Device is AAD joined ( AADJ or DJ++ ): Not Tested

User has logged on with AAD credentials: No

Windows Hello for Business policy is enabled: Not Tested

Local computer meets Windows hello for business hardware requirements: Not Tested

User is not connected to the machine via Remote Desktop: Yes

User certificate for on premise auth policy is enabled: Not Tested

Machine is governed by none policy.

See https://go.microsoft.com/fwlink/?linkid=832647 for more details.

I tried the following suggestion:

"Type gpedit.msc Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Passport for Work OR Windows Hello for Business Edit "Use Microsoft Passport for Work" OR "Use Windows Hello for Business" and set it to disabled."

I checked the registry and \HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork Enabled is set to 0.

I am using the Administrator account.

The error continues at every bootup.

Thank you.

 

Can't disable Windows Hello for Business

Hi Ted,


Just to share the difference between Windows Hello and Windows Hello for business.



Windows Hello just use fingerprint or face recognition uniquely identifies and authenticates that user to access Windows on that device.

Windows Hello for Business is Microsoft Passport technology. It uses "Windows Hello" to release a stored credential that is used as the second authentication factor by Microsoft Passport.

And Windows Hello for Business can only be used in AD or Azure AD. If you are deploying the policy to enable Windows Hello for Business, you can remove the GP, don't link them to OU, so that the client will not be applied the
policy. Then remove the Windows Hello in Sign-in options.



Since your concern needs an in-depth technical expertise, we suggest that you post your query to our

Microsoft TechNet forum page, where the community members are more versed with the matter. There are IT specialist and professional who can provide the best solution for your concern.



Regards,

 

Disabling User Passwords Disables PIN and Hello?

Hello Eric,

Thank you for posting your concern in Microsoft community and welcome to the windows 10 Family.

From the description provided, I understand that the sign in option is not working after you disabled the option for PIN input for password.

At this point, I would suggest you to deploy the
System Restore option in Windows.

This option takes your PC back to an earlier point in time, called a system restore point. Restore points are generated when you install a new app, driver, or Windows update, and when you

create a restore point manually. Restoring won’t affect your personal files, but it will remove apps, drivers, and updates installed after the restore point was made.

• 
  Right-click (or press and hold) the Start button, and then select Control Panel.
  
• 
  Search Control Panel for Recovery.
  
• 
  Select Recovery > Open System Restore > Next.
  
• 
  Choose the restore point related to the problematic app, driver, or update, and then select
  Next > Finish.
  

In order to disable the PIN sign in option in Windows 10, refer to the below steps.

Step 1: Access PC settings and open
Users and accounts.

Step 2: Select Sign-in options and tap the
Remove button under PIN.

Note: you can navigate to the same path in order to re-enable the PIN.

Hope the above information is helpful. If you need further assistance, we would be happy to help you.

Thank you.