It would be really nice if in the Intune built in compliance settings we had a Windows Hello for Business setting natively so we could ensure users have it registered since our business requires it to be registered (we are currently relying on custom compliance scripts that are a bit wonky)