Windows 10: Windows Hello for Business

Discus and support Windows Hello for Business in Windows 10 Gaming to solve the problem; Even with Windows Hello enforced via policy in Microsoft Intune, users can still sign in via single authentication using their password. I am currently... Discussion in 'Windows 10 Gaming' started by Terrell Bryant, Jun 6, 2022.

  1. Windows Hello for Business


    Even with Windows Hello enforced via policy in Microsoft Intune, users can still sign in via single authentication using their password. I am currently testing if Windows Hello for Business is a viable MFA or Passwordless solution. Is there a way to make users use their Yubioco security key and not have the option to sign in via password authentication?

    :)
     
    Terrell Bryant, Jun 6, 2022
    #1
  2. Junaid_A Win User

    Windows 10 Hello for Business with Physical Smartcard and roaming uses across shared PC's

    Hi Rosenbrier,



    Thank you for writing to Microsoft Community Forums.



    With the recent ratification of security keys by FIDO, Windows Hello allows security authentication for shared devices that allows full roaming experience. For more information, I would suggest you to refer to the article
    Windows Hello and FIDO2 Security Keys enable secure and easy authentication for shared
    devices
    and see if it helps.



    If you have any further query regarding the same, I would suggest you to post your query in the
    IT Pro TechNet Forums, where we have support professionals well equipped with the
    knowledge on Windows Hello for Business.



    Additional Info:



    Regards,
     
    Junaid_A, Jun 6, 2022
    #2
  3. Can't disable Windows Hello for Business

    I receive this error in Event Viewer whenever I boot Windows 10 Pro version 1709 build 16299.309.

    Windows Hello for Business provisioning will not be launched.

    Device is AAD joined ( AADJ or DJ++ ): Not Tested

    User has logged on with AAD credentials: No

    Windows Hello for Business policy is enabled: Not Tested

    Local computer meets Windows hello for business hardware requirements: Not Tested

    User is not connected to the machine via Remote Desktop: Yes

    User certificate for on premise auth policy is enabled: Not Tested

    Machine is governed by none policy.

    See What's new in Active Directory Federation Services for Windows Server 2016 | Microsoft Docs for more details.

    I tried the following suggestion:

    "Type gpedit.msc Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Passport for Work OR Windows Hello for Business Edit "Use Microsoft Passport for Work" OR "Use Windows Hello for Business" and set it to disabled."

    I checked the registry and \HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork Enabled is set to 0.

    I am using the Administrator account.

    The error continues at every bootup.

    Thank you.
     
    Ted Harris 600, Jun 6, 2022
    #3
  4. Windows Hello for Business

    Can't disable Windows Hello for Business

    Hi Ted,


    Just to share the difference between Windows Hello and Windows Hello for business.



    Windows Hello just use fingerprint or face recognition uniquely identifies and authenticates that user to access Windows on that device.

    Windows Hello for Business is Microsoft Passport technology. It uses "Windows Hello" to release a stored credential that is used as the second authentication factor by Microsoft Passport.

    And Windows Hello for Business can only be used in AD or Azure AD. If you are deploying the policy to enable Windows Hello for Business, you can remove the GP, don't link them to OU, so that the client will not be applied the
    policy. Then remove the Windows Hello in Sign-in options.



    Since your concern needs an in-depth technical expertise, we suggest that you post your query to our

    Microsoft TechNet
    forum page, where the community members are more versed with the matter. There are IT specialist and professional who can provide the best solution for your concern.



    Regards,
     
    Venancio Khu, Jun 6, 2022
    #4
Thema:

Windows Hello for Business

Loading...
  1. Windows Hello for Business - Similar Threads - Hello Business

  2. Windows hello for business implementation

    in Windows 10 Gaming
    Windows hello for business implementation: HelloWe have setup windows hello for business and it is working as expected but the message still appears that the organization requires additional sign in security after enrollment. Can this be turned off or modifiedThanks...
  3. Windows hello for business implementation

    in Windows 10 Software and Apps
    Windows hello for business implementation: HelloWe have setup windows hello for business and it is working as expected but the message still appears that the organization requires additional sign in security after enrollment. Can this be turned off or modifiedThanks...
  4. Windows Hello for Business vs Windows Hello and what are the requirements?

    in Windows Hello & Lockscreen
    Windows Hello for Business vs Windows Hello and what are the requirements?: Hello We have 2012 Domain Controllers in our corporate environment, due to a lot of legacy servers on premise. Are 2016 DCs an absolute requirement?Ms documentation says no apart from hybrid cloud kerberos, but key and certificate are supported with older DCs,...
  5. Windows Hello for Business vs Windows Hello and what are the requirements?

    in Windows 10 Gaming
    Windows Hello for Business vs Windows Hello and what are the requirements?: Hello We have 2012 Domain Controllers in our corporate environment, due to a lot of legacy servers on premise. Are 2016 DCs an absolute requirement?Ms documentation says no apart from hybrid cloud kerberos, but key and certificate are supported with older DCs,...
  6. Windows Hello for Business vs Windows Hello and what are the requirements?

    in Windows 10 Software and Apps
    Windows Hello for Business vs Windows Hello and what are the requirements?: Hello We have 2012 Domain Controllers in our corporate environment, due to a lot of legacy servers on premise. Are 2016 DCs an absolute requirement?Ms documentation says no apart from hybrid cloud kerberos, but key and certificate are supported with older DCs,...
  7. Windows hello for business implementation

    in Windows 10 Gaming
    Windows hello for business implementation: Hello looking for idea here for whfb.Have a hybrid join environment. Looking to move to passwordless authentication and need to prevent users from being able to login using password. Need to keep availabilty for admin account login and also not break apps that still use...
  8. Windows hello for business implementation

    in Windows 10 Software and Apps
    Windows hello for business implementation: Hello looking for idea here for whfb.Have a hybrid join environment. Looking to move to passwordless authentication and need to prevent users from being able to login using password. Need to keep availabilty for admin account login and also not break apps that still use...
  9. Windows Hello for Business is STILL getting the EVENT 360 during startup, event after...

    in Windows 10 Gaming
    Windows Hello for Business is STILL getting the EVENT 360 during startup, event after...: As can be seen from some LOCKED posts on this thanks Microsoft, the EVENT 360 is STILL seen in current Windows 10 AND windows 11 systems, even after disabling the GPEDIT.MSC Computer AND User Administrative Templates for the Use Windows Hello for Business section. This has...
  10. Windows Hello for Business is STILL getting the EVENT 360 during startup, event after...

    in Windows 10 Software and Apps
    Windows Hello for Business is STILL getting the EVENT 360 during startup, event after...: As can be seen from some LOCKED posts on this thanks Microsoft, the EVENT 360 is STILL seen in current Windows 10 AND windows 11 systems, even after disabling the GPEDIT.MSC Computer AND User Administrative Templates for the Use Windows Hello for Business section. This has...