Disable Windows Hello for Business using Intune – Comprehensive Guide

In this article, I will show you how to disable Windows Hello for Business using Intune. You can now use Intune to disable the “Your organization requires Windows Hello” or “Use Windows Hello with your account” prompt during Autopilot OOBE and get rid of WHfB permanently.


Windows Hello is a biometric device unlocking function that works with fingerprints or facial recognition. Microsoft Intune can be used to administer Windows Hello, and it is accessible on Windows 10 and Windows 11. A more secure approach to sign in to devices is with Windows Hello.


With Microsoft Intune, you can set up a tenant-wide policy that instructs Windows 10 or Windows 11 devices to use Windows Hello for Business when they enrol with Intune. This policy targets your entire organization and supports the Windows Autopilot out-of-box-experience (OOBE).


If you choose not to configure a tenant-wide policy for Windows Hello for Business, you can use a device configuration Identity protection profile to configure groups of devices for Windows Hello. Organizations that don’t use Intune can make use of Group policy to disable Windows Hello. If you are looking to disable Windows Hello for Business using Intune, this post is for you.


https://bobzhotel.altervista.org/showthread.php?tid=3258

https://forum.bedwantsinfo.nl/thread-44941-post-362062.html

http://forum.icohaberleri.com/showthread.php?tid=1477

https://forum.metalheartradio.com/thread-3019-post-16891.html

http://hondaikmciledug.co.id/HRIS/showthread.php?tid=208&pid=217#pid217

https://csgamearena.net/showthread.php?tid=32174

https://socalireefer.com/forum/showthread.php?tid=4547

http://famstock.co.uk/showthread.php?tid=9102

https://www.beautyland.ru/viewtopic.php?t=157365

https://www.beautyland.ru/viewtopic.php?t=104448

https://www.beautyland.ru/viewtopic.php?t=76852

https://www.beautyland.ru/viewtopic.php?t=76851

https://denniss.forum2go.nl/viewtopic.php?t=71227

https://denniss.forum2go.nl/viewtopic.php?t=83217

https://denniss.forum2go.nl/viewtopic.php?t=70750

https://denniss.forum2go.nl/viewtopic.php?t=73960

https://familymurders.com/forum/viewtopic.php?t=15000

https://familymurders.com/forum/viewtopic.php?t=12828

https://familymurders.com/forum/viewtopic.php?t=1669

https://familymurders.com/forum/viewtopic.php?t=22513

https://familymurders.com/forum/viewtopic.php?t=30492

https://67547.activeboard.com/t69282935/professional-link-building-service/

https://67547.activeboard.com/t68851858/mumbai-escort-services-at-vip-girls-low-cost-rates/

https://events.imeche.org/annual-dinner-2014/images/default-source/annual-dinner-2014/imeche-annual-dinner-20-11-14--9260

https://goudvis.forum2go.nl/viewtopic.php?t=193522


Why disable Windows Hello for Business?


Although Windows hello is a great feature, not everyone needs it. Not all organizations prefer to use Windows hello because it requires tow-factor authentication instead of passwords. When you assign a new laptop to your employees provisioned by Autopilot, the Windows Hello appears during the OOBE.


Your organization requires Windows Hello during Autopilot OOBE


The below screenshot is an example of the Windows Hello screen appearing on the laptop provisioned with Autopilot during the OOBE. With Windows Hello for business enabled during user-driven Autopilot, you see the window with the following message:


Use Windows Hello with your account. Your organization requires you to set up your work or school account with Windows Hello Face, Fingerprint, or PIN. If you have already set up Windows Hello on this device, we’ll automatically add it for this account. You may be asked to re-verify with Windows Hello. If your organization requires a more complex PIN, Windows will prompt you to change it.


Difference between Windows Hello and Windows Hello for Business


With Windows Hello, individuals can create a PIN or biometric gesture on their personal devices for convenient sign-in. This configuration is referred to as Windows Hello convenience PIN, and it’s not backed by asymmetric (public/private key) or certificate-based authentication.


Whereas the Windows Hello for Business is configured by group policy or mobile device management (MDM) policy such as Intune, always uses key-based or certificate-based authentication. This behavior makes it more secure than Windows Hello convenience PIN.


https://goudvis.forum2go.nl/viewtopic.php?t=733035

https://goudvis.forum2go.nl/viewtopic.php?t=732025

https://goudvis.forum2go.nl/viewtopic.php?t=249091

https://www.goalissimo.org/forum/viewtopic.php?f=14&t=220275

https://www.goalissimo.org/forum/viewtopic.php?f=14&t=220261

https://www.goalissimo.org/forum/viewtopic.php?f=2&t=220222

http://www.salvagecarforum.com/viewtopic.php?p=76230

https://www.salvagecarforum.com/viewtopic.php?t=155991

https://salvagecarforum.com/viewtopic.php?t=122873

https://salvagecarforum.com/viewtopic.php?t=32544

http://www.forum.anomalythegame.com/viewtopic.php?f=57&t=95605

http://www.forum.anomalythegame.com/viewtopic.php?f=24&t=95520

http://www.forum.anomalythegame.com/viewtopic.php?f=57&t=94972

http://www.forum.anomalythegame.com/viewtopic.php?f=57&t=61442

http://biowong.freehostia.com/phpbb2/viewtopic.php?p=1594330

http://biowong.freehostia.com/phpbb2/viewtopic.php?p=1597219

http://biowong.freehostia.com/phpbb2/viewtopic.php?t=449930

http://forum.saintbrieuc-parlonsnous.fr/viewtopic.php?t=42514

http://forum.saintbrieuc-parlonsnous.fr/viewtopic.php?t=142378

http://forum.saintbrieuc-parlonsnous.fr/viewtopic.php?t=501770

http://forum.saintbrieuc-parlonsnous.fr/viewtopic.php?t=43297


Ways to Turn off the Windows Hello for Business


Listed below are different ways to disable the Windows hello for business configuration in Intune


  • Configure Windows Hello for Business from Windows Enrollment (Applies for entire tenant)
  • Use Intune WHfB device configuration profile to disable Windows Hello for Business (Scoped method)
  • Use Endpoint Security – Account Protection


I want to highlight an important point here. When you disable the Windows hello for business from Windows enrollment settings, the settings apply to the entire tenant and can’t be scoped. So use this method if you would like to remove the Hello for Business prompt during OOBE (for Autopilot as an example).


Disable Windows Hello for Business using Intune


You’ll need to be signed in with an Intune Administrator role. Perform the following steps to disable Windows Hello for Business using Intune:


  • Sign in to Microsoft Intune Admin Center.
  • Go to Devices > Windows > Windows Enrollment.
  • Under the General section, select Windows Hello for Business.


Comments

Post a Comment

Popular posts from this blog

3 Ways to Restart ConfigMgr PXE Responder Service on a DP

In this article, I will show you multiple ways to restart ConfigMgr PXE responder service on a distribution point server. Restarting the PXE responder service is typically done during the OSD troubleshooting and helps you resolve many OSD issues. The PXE responder service manages requests made by Pre-Boot execution Environment (PXE) – enabled client computers. If this service is stopped, PXE-enabled client computers will be unable to install Windows remotely. When you install a distribution point, the PXE responder service is not enabled by default. By enabling the PXE responder on SCCM DP, you can get rid of WDS as it isn’t required any more. If you are new to ConfigMgr, learn how to enable PXE responder without WDS on a SCCM DP. When you enable the PXE responder services on a distribution point, you’ll notice a new service (SCCMPxe) is installed, known as ConfigMgr PXE responder service. This service has no dependencies, and the activities of this service are logged in a separate fil...
Read more

ConfigMgr Technical Preview 2303 New Features & Improvements

It’s the end of March 2023, and we have a new ConfigMgr Technical Preview 2303 update. We see two new features, support for SQL 2022 for SCCM and dark theme extended for open customer voice (OCV) wizard. If you are running a dedicated lab for ConfigMgr Technical Preview like me, you will see a new update for technical preview version 2303 in the console. If you don’t see the update yet, run the check for updates to get the latest technical preview 2303 update. Prior to the release of TP 2303, the two previous technical preview releases were TP 2301 and TP 2302. Here is an updated article consisting of all the SCCM technical preview releases along with build numbers and new features. If you are setting up a new technical preview lab, you can download the technical preview 2302 is a baseline version that you can download from Microsoft Eval center. A baseline media includes all the setup files required to install SCCM or Configuration Manager. Note: Starting with Configuration Manager ve...
Read more

2 Best Solutions: Error Can’t Connect to Windows 365

In this article, I will show you how to resolve the error can’t connect to Windows 365. If you are unable to access your Cloud PC using the Windows 365 app, there are two ways to solve this issue. I normally connect to my Cloud PC using the Windows 365 app. Note that there are multiple ways to connect and access your Cloud PCs. For instance, you can connect to a cloud PC using the Windows 365 home page, the Windows 365 App, or the Microsoft Remote Desktop client. Cloud PCs are accessible to users only after you assign Windows 365 licenses to users. Note that you should also provision Windows 365 Cloud PCs that allow users to access them from any device. In my case, the provisioning policy in place for Cloud PCs and a valid license was assigned to the user. In some cases, when you attempt to connect to Cloud PC, there may be gateway errors or connection errors. Refer to the following guide on troubleshooting Cloud PC connection errors, where I have covered solutions for Cloud PC access ...
Read more