Windows Hello for Business implementation

Question

Hi,For a couple of days now we've introduced Windows Hello for Business (WHfB) to a subset of test devices from within Intune. Everything works as expected except for one thing I guess:&nbsp;When someone tries to logon with a non-enterprise account (eg.&nbsp;@live.nl) in Teams, and/or Onedrive, the machine is prompting to authenticate with WHfB. Am I missing something? Why is this happening and how can we prevent this?&nbsp;Any thoughts are welcome.

moe_kinani · Answer

Hi Jordi,Is the Config Profile scoped for Devices? If yes, I would scope it for users.Are the non enterprise accounts guest in your tenant? I would also unlink it from Email accounts under Accounts- Setting.Let’s us know how it goes!Moe

harm_veenstra · Answer

I guess that's just Windows Hello for Business trying to be nice for you 🙂 If you login to a client using Windows Hello for Business, it defaults to that when getting prompted for credentials. You can select other options and then enter a username/password right?

jordi_koenderink · Answer

Not sure if you can but what I'm more interested in is, why is this happening for personal accounts and how can we prevent this?

jordi_koenderink · Answer

Moe_Kinani:We are using the Settings catalog and basically used all the Windows Hello settings available which is already scoped to users, the enterprise accounts are not guests. See the below snippet from my environment:&nbsp;The issue shows up in the non-work Teams app.&nbsp;I'm not sure what you mean by "unlink it from Email accounts". Can you elaborate?&nbsp;

moe_kinani · Answer

Yes unlink them, is it possible to change from Catalog Setting to Regular Template Profile- Identity Protection for testing?Moe

Forum Discussion

Windows Hello for Business implementation

8 Replies

Resources