Home

Disable Windows Hello for Business

%3CLINGO-SUB%20id%3D%22lingo-sub-143110%22%20slang%3D%22en-US%22%3EDisable%20Windows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-143110%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20an%20admin%2C%20and%20attempting%20to%20disable%20%22Windows%20Hello%20for%20Business%22%20also%20referred%20to%20as%202-step%20authentication.%20From%20what%20I%20gather%2C%20this%20option%20is%20set%20as%20%22disabled%22%20by%20default.%20I%20confirmed%20this.%20However%20Whenever%20I%20join%20a%20device%20to%20Azure%20AD%2C%20it%20is%20always%20prompted%20with%20%22Windows%20Hello%22%20and%20to%20create%20a%20pin.%20Where%20can%20I%20find%20the%20option%20that%20allows%20me%20to%20disable%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-143110%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAAD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ewindows%2010%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-289827%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20Windows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289827%22%20slang%3D%22en-US%22%3E%3CP%3EWHFB%20is%20disabled%20in%20the%20Windows%20Device%20Enrollment%20blade%20it%20might%20be%20worth%20checking%20to%20ensure%20you%20don't%20have%20any%20Identity%20protection%20policies%20configuration%20in%20device%20configuration%20policies%20which%20is%20enabling%20it%20for%20users.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-289756%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20Windows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289756%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20entire%20Windows%20development%20departments%20were%20and%20are%20still%20in%20their%20Augmented%20Reality%20where%20it%20is%20acceptable%20to%20code%20operating%20systems%20like%20banner%20ads%2C%20and%20come%20to%20the%20workplace%20under%20the%20influence%20of%20prohibited%20substances.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20a%20result%2C%20Hello%20for%20Business%20will%20also%20check%20your%20device%20every%20few%20hours%20to%20see%20if%20it%20can't%20already%20provision%20Hello%20for%20Business%2C%20because%20it%20checked%20a%20day%20ago%2C%20and%20was%20told%20it%20wasn't%20capable.%20I%20guess%20Hello%20for%20Business%20wants%20to%20say%20Hello%20to%20the%20Event%20Viewer%20and%20Error%20Reporting%20log%20too.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-185667%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20Windows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-185667%22%20slang%3D%22en-US%22%3E%3CP%3EI%20keep%20getting%20an%20error%20on%20my%20logs%20about%20Azure%2C%20but%20I%20have%20never%20installed%20such%20a%20program.%26nbsp%3B%20How%20is%20this%20program%20removed%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-143708%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20Windows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-143708%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20have%20to%20have%20full%20Intune%20and%20not%20Intune%20for%20EDU.%20You%20need%20to%20make%20sure%20it%20is%20disabled%20in%20Intune%20on%20Azure%20portal.%20Some%20more%20details%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsocial.msdn.microsoft.com%2FForums%2Fen-US%2Fd212507c-55ea-49a3-971e-4dd19e0ea539%2Fpin-required-for-azure-ad-join-of-devices-can-it-be-disabled-controlled%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.msdn.microsoft.com%2FForums%2Fen-US%2Fd212507c-55ea-49a3-971e-4dd19e0ea539%2Fpin-required-for-azure-ad-join-of-devices-can-it-be-disabled-controlled%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Joshua Dolecal
New Contributor

I am an admin, and attempting to disable "Windows Hello for Business" also referred to as 2-step authentication. From what I gather, this option is set as "disabled" by default. I confirmed this. However Whenever I join a device to Azure AD, it is always prompted with "Windows Hello" and to create a pin. Where can I find the option that allows me to disable this?

4 Replies

You have to have full Intune and not Intune for EDU. You need to make sure it is disabled in Intune on Azure portal. Some more details - https://social.msdn.microsoft.com/Forums/en-US/d212507c-55ea-49a3-971e-4dd19e0ea539/pin-required-for...

I keep getting an error on my logs about Azure, but I have never installed such a program.  How is this program removed?

The entire Windows development departments were and are still in their Augmented Reality where it is acceptable to code operating systems like banner ads, and come to the workplace under the influence of prohibited substances.

 

As a result, Hello for Business will also check your device every few hours to see if it can't already provision Hello for Business, because it checked a day ago, and was told it wasn't capable. I guess Hello for Business wants to say Hello to the Event Viewer and Error Reporting log too.

WHFB is disabled in the Windows Device Enrollment blade it might be worth checking to ensure you don't have any Identity protection policies configuration in device configuration policies which is enabling it for users.

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies