Windows 10: Windows 11 Azure joined + YubiKey Bio -> "Getting ready" loop

Hi all,We've been experimenting with true passless authentication for our workstations, and have an issue that is not described anywhere online where we can find. Our setup is as follows;Windows 11 Enterprise system which is AzureAD joinend via the user that is logged inUser that is AD Azure enrolledYubiKey BioThe process;Configure PIN + fingerprint via Windows Signin Options security keyAdd key to the user account via https://mysignins.microsoft.com/Lock the system, insert the key, it recognizes the key, asks for the fingerprint, accepts it -> now the issue occurs;It enters a process w

:)

 

update on Azure AD support for FIDO2 security keys in hybrid environments

this is still a preview thing right? any update on the GA release?

I might have an opportunity where we can deploy yubikeys, but the customer is not yet ready for AAD join.

the customer has nothing yet in azure AD either, using azure ad free should work for yubikeys if they have W10 2004 if i'm correct

but also that means in the free AAD they can only do MFA with phone authentication (as MFA is a prereq for the security key signin)

anyone did something similar recently?

 

After Upgrade to Windows 10 Pro, cannot join Azure

OK, i fixed it. After recovery for one more time, third!, i activated network access and after that i was presented with the "Azure School or Work Account" Login window. I could log in, so everything is fine now.

Steps to make it work:

1. Start device with no network connection and log in as local account
   
2. Buy Windows 10/ Pro and activate
   
3. Boot to recovery and choose to delete all local data and do a local reinstall
   
4. After the recovery/installation has finished...
   
5. boot up again, connect to network and joining Azure should be possible..
   

 

Joining Windows 10 to Office365/azure

Hi Lan,



Based on your description, we understand that you want to join Azure AD from a local admin. You may refer to this article

AzureAD Domain Join – Add user to local adminstrator group.

In addition, we suggest you post the question in
Azure forum for dedicated assistance. This is the specific channel that handles Azure related questions and issue.



Thanks for your understanding.



Regards,

Tina