Disabling pin while keeping windows hello enabled
We would like to keep the use of windows hello biometrics but instead of a pin, could I force the Microsoft account password? Due to some security requirements, devices are required to have a 14 alphanumeric password with special characters. This gets pretty annoying when we have our devices lock after a minute of inactivity which is why we keep windows hello enabled. If we have pin enabled, it would have to meet the password requirements of 14 characters yada yada. The problem with that would be confusing the end users by having multiple long passwords. Is there a way to have windows hello enabled but instead of the local pin, have the microsoft account password be used instead?manage Interactive logon & Windows Hello multi-factor unlock
Hi everyone, We're going step by step on the passwordless strategy from Microsoft. Windows Hello multi-factor unlock is deployed in a Pilot Group but now I have two questions, which I hope someone here can answer. Question 1: disable Windows Hello multi-factor unlock Managed to enable WHMFU over custom OMA-URI Settings. But how can I disable it again? I tried it with a second custom OMA-URI Settings configuration profile which is configured as follows: It works, but it seems, that it isn't disabled correctly. Sometimes I still get a message in the logon process which says something like "additional factor needs to verify" but it displays very quickly, and I verified that I can log on with only one factor again. Disabling the second unlock factor is configured like this as well. Question 2: Enable "Interactive logon: Require Windows Hello for Business or smart card" We want to enable this security option. However, Intune doesn't offer to manage this setting. So, I think that I must enable this over a custom OMA-URI Setting too or PowerShell script. How can I achieve this? Thanks so much for any support ❤️
Autopilot devices forcing Windows Hello for Business setup
We are not currently using autopilot but I am planning on rolling it out with some new devices we are purchasing in a few months. I have been doing some experimenting with it and I am stuck. In Intune enrollment settings I have set windows hello for business to disabled. However, whenever I try to enroll a device with autopilot it tries to force the user account to enroll in windows hello. I understand the benefits of using windows hello, but I am not currently ready to roll it out to my users. Can anyone help me figure out why this is happening? I have attached a screenshot of my windows hello settings.
Issue with Windows Hello after fresh restart with autopilot.
Hi, I have several computers added to autopilot. I also have Windows Hello disabled. But when giving the device a fresh start in Intune, it asks to set a Pin with Windows Hello. How is this possible? i disabled Windows Hello in Intune. Any else having this issue?
