SOLVED

Hybrid Azure AD Joined device will not provision for Windows Hello for Business

%3CLINGO-SUB%20id%3D%22lingo-sub-1484234%22%20slang%3D%22en-US%22%3EHybrid%20Azure%20AD%20Joined%20device%20will%20not%20provision%20for%20Windows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1484234%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20everyone%3C%2FP%3E%3CP%3EI%20have%20some%20virtual%20machines%20in%20a%20lab%20environment%20running%20Windows%2010%20Enterprise%20Evaluation%201909%20that%20are%20Hybrid%20Azure%20AD%20joined.%26nbsp%3B%20I%20am%20trying%20to%20get%20at%20least%20one%20of%20them%20to%20provision%20for%20Windows%20Hello%20for%20Business.%26nbsp%3B%20This%20is%20what%20I%20see%20under%20the%20Ngc%20Prerequisite%20Check%20when%20I%20run%20dsregcmd%20%2Fstatus%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Ricoli610_0-1592931669830.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F200588iDB1D01E02AF1E71E%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Ricoli610_0-1592931669830.png%22%20alt%3D%22Ricoli610_0-1592931669830.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EAny%20pointers%20or%20guidance%20you%20can%20offer%20would%20be%20gratefully%20received.%3C%2FP%3E%3CP%3EThank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1505760%22%20slang%3D%22en-US%22%3ERe%3A%20Hybrid%20Azure%20AD%20Joined%20device%20will%20not%20provision%20for%20Windows%20Hello%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1505760%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F466611%22%20target%3D%22_blank%22%3E%40Ricoli610%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHello%2C%20it%20seems%20hardware%20requirement%20problem.%3C%2FP%3E%3CP%3EFrom%20the%20documentation%3A%20%22%3CSTRONG%3EDeviceEligible%3A%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B-%20Set%20to%20%E2%80%9CYES%E2%80%9D%20if%20the%20device%20meets%20the%20hardware%20requirement%20for%20enrolling%20with%20WHFB.%22%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20think%2C%20your%20virtual%20machine%20has%20no%20TPM-chip.%20In%20Windows%202016%20or%20Windows%2010%20Hyper-V%2C%20you%20can%20enable%20the%20trusted%20platform%20module%20(if%20host%20supports)%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22010101.jpg%22%20style%3D%22width%3A%20797px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F203749i7097BCF52CA51E3E%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22010101.jpg%22%20alt%3D%22010101.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ERegards%2C%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EZoltan%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi everyone

I have some virtual machines in a lab environment running Windows 10 Enterprise Evaluation 1909 that are Hybrid Azure AD joined.  I am trying to get at least one of them to provision for Windows Hello for Business.  This is what I see under the Ngc Prerequisite Check when I run dsregcmd /status:

Ricoli610_0-1592931669830.png

Any pointers or guidance you can offer would be gratefully received.

Thank you!

1 Reply
best response confirmed by Ricoli610 (New Contributor)
Solution

@Ricoli610 

 

Hello, it seems hardware requirement problem.

From the documentation: "DeviceEligible: - Set to “YES” if the device meets the hardware requirement for enrolling with WHFB."

 

I think, your virtual machine has no TPM-chip. In Windows 2016 or Windows 10 Hyper-V, you can enable the trusted platform module (if host supports)

 

010101.jpg

 

Regards,

Zoltan