Windows 10: W10 What do I do to get rid of warmomg Windows Hello for Business cloud Kerberos trust

Event view show these message Event Viewer started in 2022.I am a Home user. No business. Only user on the system.There is not gpedit.msc on a W10 home system.Warning shows User Device Registration Event ID 360Windows Hello for Business provisioning will not be launched. Device is AAD joined AADJ or DJ++ : Not Tested User has logged on with AAD credentials: No Windows Hello for Business policy is enabled: Not

:)

 

Migrating from Windows Hello for Business Certificate Trust to Cloud Kerberos Trust, what about the decommissioning of the AD FS?

Hello,

Today we have deployed Windows Hello for Business to all our end user Windows 10 devices based on the "Certificate Trust" deployment. We have now prepared, configured and tested with success the "Cloud Kerberos trust" deployment.

We have understood that during the migration from the on-premise deployment to the hybrid deployment, we have to force users to re-enroll them with Windows Hello for Business. Please correct me if I am wrong.

Now we are wondering, what would be the impact if we decommission the AD FS before having redeployed all our users to the hybrid scenario "Cloud Kerberos Trust"?

• For users not migration to the hybrid deployment, will WHFB still work without AD FS?
  
• What will happen if the certificate delivered by the internal certificate authority get expired? Will the certificate still be renewed by the PKI, without going through the AD FS? Or will the user get stuck, with a none working PIN?
  

Thanks.

 

Migrating from Windows Hello for Business Certificate Trust to Cloud Kerberos Trust, what about the decommissioning of the AD FS?

Hi,

Thanks do the quick answer.

I have raised the same question on the "sister" forum.

I am adding the link to it, for follow-up:

Migrating from Windows Hello for Business Certificate Trust to Cloud Kerberos Trust, what about the decommissioning of the AD FS? - Microsoft Q&A

Thanks.

 

Deploy Windows Hello for Business Cloud Trust using Intune

Hi,

I am deploying WHfB Cloud Trust in Hybrid Azure AD. I followed the Microsoft Documentation: https://learn.microsoft.com/en-us/w...n/hello-for-business/hello-hybrid-cloud-trust

First I tried using GPO and it works well. I can see the event 358 saying WHfB cloud trust is enabled and the computer got the TGT ticket. Everything works fine.

But then I removed the GPO and tried using Intune. The users are prompted to create the PIN and they are able to log in but it fails randomly. I checked the event viewer and now in the event 358 it says that Cloud Trust is not enabled and the TGT ticket is "not tested"

Both the configuration profiles in Intune (enablement with OMA uri and PIN Reqs) are applied, the state is "Succeded" for the computers. Why is Cloud Trust not enabled? I guess everything is ok in AD and the computer as when I enable the GPO it works fine and I can see how the secret is stored and read in Azure AD. Thanks

Regards.