Forum Discussion
AndrewManning
May 21, 2020Copper Contributor
Windows Hello enforces 2FA
In a school environment we want to use Windows Hello. If I disable it, all users can sign into AzureAD managed devices easily. However they cannot enable Windows Hello (face) If I enable Win...
Thijs Lecomte
May 23, 2020Bronze Contributor
Windows Hello for Business requires 2FA, so there is no way around it.
I would advise you to try your students to utilize 2FA.
Todays kids are used to this from their iPhone/Android phone and are tech savvy enough to walk through it
I would advise you to try your students to utilize 2FA.
Todays kids are used to this from their iPhone/Android phone and are tech savvy enough to walk through it
- AndrewManningMay 23, 2020Copper ContributorWindows Hello doesn’t require 2FA on a Windows domain, so why does it require it when the device is managed by Intune?
All of our Students are under 11 years old. I do not think that expecting them to have a mobile is really acceptable.- Thijs LecomteMay 23, 2020Bronze ContributorThere is a big difference between Windows Hello and Windows Hello for Business
Check out this article for more info: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview- AndrewManningMay 23, 2020Copper ContributorSo can we enable Windows Hello on devices, rather than Windows Hello for Business via Intune?