Reset Windows Hello for Business

[PatrickF11]

Hi,

i'm looking for a possibility to reset Hello for Business for a user, because he has problems with his config.

My first idea was to clear the content inside the attribute msDS-KeyCredentialLink. Unfortunately i didn't made it :D

Are there any ideas on how to reset the HfB for one User, so he has to reregister at next sign in?

[#2]

Have him do a PIN reset, it will re-initialize the whole process. There's a difference between On-Prem and Hybrid environment PIN resets though, as noted here: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-faq#w...

[#3]

if the WHfB is really messed up, then only the reset helps "certutil.exe -deleteHelloContainer". Explanation behind the link from Vasil

[#4]

@fieberO Thanks to answer to this old thread. :)

In the meantine i've stumbled upon this command already, working really well. (But i've forgot to tell it here)

Thanks for sharing anyway. 

[#5]

no problem, only together we solve the problem ... small string with a big effect, when the whfb gets lost in the hybrid world ;)