I am an admin, and attempting to disable "Windows Hello for Business" also referred to as 2-step authentication. From what I gather, this option is set as "disabled" by default. I confirmed this. However Whenever I join a device to Azure AD, it is always prompted with "Windows Hello" and to create a pin. Where can I find the option that allows me to disable this?
The entire Windows development departments were and are still in their Augmented Reality where it is acceptable to code operating systems like banner ads, and come to the workplace under the influence of prohibited substances.
As a result, Hello for Business will also check your device every few hours to see if it can't already provision Hello for Business, because it checked a day ago, and was told it wasn't capable. I guess Hello for Business wants to say Hello to the Event Viewer and Error Reporting log too.
WHFB is disabled in the Windows Device Enrollment blade it might be worth checking to ensure you don't have any Identity protection policies configuration in device configuration policies which is enabling it for users.