Windows 10: Windows Hello for Business not activating

I have a Hybrid Azure AD environment in my company. We have chosen the Windows Hello for Business key trust model and Carefully followed the following guide:


https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings


Let me also give some details about our environment:

• Windows Server 2019 DC
• Azure Active directory with Endpoint manager
• Windows 10 Pro 20H2
• Intune Policy for Windows Hello for Business

Still now we have no prompt for activating PIN or Biometric by Windows Hello for Business! after checking the event log Event Viewer > Applications and Service Logs\Microsoft\Windows\User Device Registration\Admin I found these event id's:


359:

Windows Hello for Business provisioning has encountered an error during policy evaluation.

ExitCode: The system cannot find the file specified.

Method: DmIsNgcCertPayloadReceived

See https://go.microsoft.com/fwlink/?linkid=832647 for more details


360:

Windows Hello for Business provisioning will not be launched.

Device is AAD joined AADJ or DJ++ : Yes

User has logged on with AAD credentials: No

Windows Hello for Business policy is enabled: Yes

Windows Hello for Business post-logon provisioning is enabled: Yes

Local computer meets Windows hello for business hardware requirements: Yes

User is not connected to the machine via Remote Desktop: Yes

User certificate for on premise auth policy is enabled: Yes

Machine is governed by mobile device management policy.

See https://go.microsoft.com/fwlink/?linkid=832647 for more details.


361:

Windows Hello for Business provisioning will not be launched.

Device is AAD joined AADJ or DJ++ : Yes

User has logged on with AAD credentials: No

Windows Hello for Business policy is enabled: Yes

Windows Hello for Business post-logon provisioning is enabled: Yes

Local computer meets Windows hello for business hardware requirements: Yes

User is not connected to the machine via Remote Desktop: Yes

User certificate for on premise auth policy is enabled: Yes

MDM user certificate enrollment is ready: Error

Certificate enrollment method: mobile device management

See https://go.microsoft.com/fwlink/?linkid=832647 for more details


362:

Windows Hello for Business provisioning will not be launched.

Device is AAD joined AADJ or DJ++ : Yes

User has logged on with AAD credentials: No

Windows Hello for Business policy is enabled: Yes

Windows Hello for Business post-logon provisioning is enabled: Yes

Local computer meets Windows hello for business hardware requirements: Yes

User is not connected to the machine via Remote Desktop: Yes

User certificate for on premise auth policy is enabled: Yes

Enterprise user logon certificate enrollment endpoint is ready: Not Tested

Enterprise user logon certificate template is : Not Tested

User has successfully authenticated to the enterprise STS: Not Tested

Certificate enrollment method: mobile device management

See https://go.microsoft.com/fwlink/?linkid=832647 for more details.

:)

 

Windows 10 Hello for Business with Physical Smartcard and roaming uses across shared PC's

Hi Rosenbrier,



Thank you for writing to Microsoft Community Forums.



With the recent ratification of security keys by FIDO, Windows Hello allows security authentication for shared devices that allows full roaming experience. For more information, I would suggest you to refer to the article
Windows Hello and FIDO2 Security Keys enable secure and easy authentication for shared
devices and see if it helps.



If you have any further query regarding the same, I would suggest you to post your query in the
IT Pro TechNet Forums, where we have support professionals well equipped with the
knowledge on Windows Hello for Business.



Additional Info:

• Implementing strong user authentication with Windows Hello for Business
  
• Windows Hello for Business Frequently Asked Questions
  
  

Regards,

 

windows hello business errors

In setup the Windows Hello isn't available on this device. camera active and works with other programs.

Getting errors in event logs that hello business can't connect. What is happening here?

 

Can't disable Windows Hello for Business

I receive this error in Event Viewer whenever I boot Windows 10 Pro version 1709 build 16299.309.

Windows Hello for Business provisioning will not be launched.

Device is AAD joined ( AADJ or DJ++ ): Not Tested

User has logged on with AAD credentials: No

Windows Hello for Business policy is enabled: Not Tested

Local computer meets Windows hello for business hardware requirements: Not Tested

User is not connected to the machine via Remote Desktop: Yes

User certificate for on premise auth policy is enabled: Not Tested

Machine is governed by none policy.

See https://go.microsoft.com/fwlink/?linkid=832647 for more details.

I tried the following suggestion:

"Type gpedit.msc Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Passport for Work OR Windows Hello for Business Edit "Use Microsoft Passport for Work" OR "Use Windows Hello for Business" and set it to disabled."

I checked the registry and \HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork Enabled is set to 0.

I am using the Administrator account.

The error continues at every bootup.

Thank you.