Windows 10: which way is best recommended for Windows Hello for Business from Intune?

Hello,It seems very confusing when Microsoft has no clear direction for how to create Windows Hello for Business deployment profile from Intune. Below article describes that Identity protection method for Hello is deprecated.https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-account-protection-policyNow as per my understanding there are currently at least 4 methods which i am aware of are available.Question 1 is, which one is recommended/best?1- Using System Catalog2- Using Custom CSP profile3- Identity Protection4- Account Protection5-Global Windows Hellolets way we disab

:)

 

Windows Hello for Business

Even with Windows Hello enforced via policy in Microsoft Intune, users can still sign in via single authentication using their password. I am currently testing if Windows Hello for Business is a viable MFA or Passwordless solution. Is there a way to make users use their Yubioco security key and not have the option to sign in via password authentication?

 

Intune

Hello Lindsay

Thank you for participating in the Microsoft Community, My name is Miguel T. I'm an independent Advisor

To help you Out in a better way with your Incident about Microsoft Intune I would suggest to you post your question on the Business Techne Microsoft Forum:

https://social.technet.microsoft.com/Forums/en-...

Or Open a Service Request directly from Azure Admin Center microsoft.office365.supportTickets/tickets/manage:

https://docs.microsoft.com/en-us/intune/get-sup...

 

Windows hello sign in

Well, for business account it is slightly different. Please try the steps in the following page:

https://docs.microsoft.com/en-us/intune/protect...