Windows 10: Windows Hello for Business stopped working for some devices/users

Hi, we are starting to implement Windows Hello for Business and we have set it as a GPO, it's been working fine and I'm onboarding users as I add them to the OU that has the GPO in it.We run the gpupdate/force, restart and the provisioning screen shows up fine for W11 and W10 users, and they get enrolled, all good.I have the cloud trust counterpart policy on Intune, It happened recently that 2 users failed to input the correct PIN a couple of times and WHfB became unavailable now.Is there an attempt to retry timeout for this that prevents the use of fingerprint/pin?Also, the Windows Settings S

:)

 

My hello sign in stopped working.

Hi,

This problem that started after installing the last Windows update might be caused by outdated or corrupted device drivers. For us to better assist you, we'll be needing additional information:

• Are you pertaining on Windows Hello sign-in? If yes, does it mean that the facial recognition is not working?
• Is there an error message displayed when using Windows Hello?

Meanwhile, it is better to check the status of Windows Hello sign-in option in your computer. To check the Windows Hello status, follow these steps:

• Click the Start button and select the Settings
  icon.
• Choose Accounts from the list.
• Select Sign-in options in the left pane of the window.
• Under Windows Hello, kindly check the status of it.

As an initial troubleshooting step, we suggest keeping the device drivers like camera driver up-to-date. For your reference, check this article on how to
update drivers in Windows 10.

We'll keep an eye out for your response.

 

Windows 10 Hello for Business with Physical Smartcard and roaming uses across shared PC's

Hi Rosenbrier,



Thank you for writing to Microsoft Community Forums.



With the recent ratification of security keys by FIDO, Windows Hello allows security authentication for shared devices that allows full roaming experience. For more information, I would suggest you to refer to the article
Windows Hello and FIDO2 Security Keys enable secure and easy authentication for shared
devices and see if it helps.



If you have any further query regarding the same, I would suggest you to post your query in the
IT Pro TechNet Forums, where we have support professionals well equipped with the
knowledge on Windows Hello for Business.



Additional Info:

• Implementing strong user authentication with Windows Hello for Business
  
• Windows Hello for Business Frequently Asked Questions
  
  

Regards,

 

Can't disable Windows Hello for Business

I receive this error in Event Viewer whenever I boot Windows 10 Pro version 1709 build 16299.309.

Windows Hello for Business provisioning will not be launched.

Device is AAD joined ( AADJ or DJ++ ): Not Tested

User has logged on with AAD credentials: No

Windows Hello for Business policy is enabled: Not Tested

Local computer meets Windows hello for business hardware requirements: Not Tested

User is not connected to the machine via Remote Desktop: Yes

User certificate for on premise auth policy is enabled: Not Tested

Machine is governed by none policy.

See Windows Hello for Business cloud Kerberos trust deployment - Windows Security for more details.

I tried the following suggestion:

"Type gpedit.msc Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Passport for Work OR Windows Hello for Business Edit "Use Microsoft Passport for Work" OR "Use Windows Hello for Business" and set it to disabled."

I checked the registry and \HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork Enabled is set to 0.

I am using the Administrator account.

The error continues at every bootup.

Thank you.