Forum Discussion

awaaziz's avatar
awaaziz
Copper Contributor
Nov 18, 2020

Can't Disable Default Windows Hello for Business Policy

Hello,

 

I have a problem in Microsoft Intune, i cant disable the default Policy That enable Windows Hello for Business.

 

Best regards

  • Hi awaaziz,

     

    sadly the attached picture is not loading for me, so I can't comment on this, but in general as long as you are Intune Administrator you should have the option to modify the global policy under Home > Devices > Enroll Devices > Windows Enrollment > Windows Hello for Business (see attachment WHfB.png), just set it to Disabled (compare second screenshot WHfB2.png).

     

    BTW, there is also an option to create a dedicated configuration profile to control this. So instead of modifying the global policy, you can leave it to "not configured" and create the Identity Protection configuration profile for Windows 10 and set the value there to disable (compare screenshot WHfBviaConfigProfile.png)

     

    best,

    Oliver

    • awaaziz's avatar
      awaaziz
      Copper Contributor

      Oliver Kieselbach Thanks for your reply.

      The problem is with the default strategy, it is activated when I want to set it to unconfigured, nothing happens and the save button is greyed out.

      I know very well that normally I must have the authorizations to modify it.

      There is no policy configured in the Identity Protection section.

       

      I have attached again the screen shot

      • awaaziz 

         

        This is not a normal behavior, I checked two tenants for you and I'm able to set it to "not configured" and I can save this successfully. You should have the same experience.

         

         

        Maybe try a different browser? I used latest Edge (Chromium bsed).

        Verify your credentials once again, use a Global Admin just to be sure.

         

        best,

        Oliver

Resources