Tell us about Windows Hello for Business. Usually I don't use the global setting under Intune > Windows > Enrollment  ....instead I have been using Intune > Endpoint Security > Account Protection to create a WHfB policy. Am I doing it the right way? I find the tenant/global setting very limited in terms of options.