Autopilot devices forcing Windows Hello for Business setup

%3CLINGO-SUB%20id%3D%22lingo-sub-1386957%22%20slang%3D%22en-US%22%3EAutopilot%20devices%20forcing%20Windows%20Hello%20for%20Business%20setup%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1386957%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20not%20currently%20using%20autopilot%20but%20I%20am%20planning%20on%20rolling%20it%20out%20with%20some%20new%20devices%20we%20are%20purchasing%20in%20a%20few%20months.%26nbsp%3B%20I%20have%20been%20doing%20some%20experimenting%20with%20it%20and%20I%20am%20stuck.%26nbsp%3B%20In%20Intune%20enrollment%20settings%20I%20have%20set%20windows%20hello%20for%20business%20to%20disabled.%26nbsp%3B%20However%2C%20whenever%20I%20try%20to%20enroll%20a%20device%20with%20autopilot%20it%20tries%20to%20force%20the%20user%20account%20to%20enroll%20in%20windows%20hello.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20understand%20the%20benefits%20of%20using%20windows%20hello%2C%20but%20I%20am%20not%20currently%20ready%20to%20roll%20it%20out%20to%20my%20users.%26nbsp%3B%20Can%20anyone%20help%20me%20figure%20out%20why%20this%20is%20happening%3F%26nbsp%3B%20I%20have%20attached%20a%20screenshot%20of%20my%20windows%20hello%20settings.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Hello%20for%20business%20disable.JPG%22%20style%3D%22width%3A%20255px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F191387i8B516931612AD94E%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Hello%20for%20business%20disable.JPG%22%20alt%3D%22Hello%20for%20business%20disable.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1386957%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Hello%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1387154%22%20slang%3D%22en-US%22%3ERe%3A%20Autopilot%20devices%20forcing%20Windows%20Hello%20for%20Business%20setup%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1387154%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F300234%22%20target%3D%22_blank%22%3E%40muels7%3C%2FA%3EI%20don't%20think%20this%20disabled%20applies%20to%20the%20Windows%20Autopilot%20it%20only%20applies%20to%20enroll%20already%20in%20used%20devices%20or%20doing%20the%20OOBE%20out%20of%20the%20box%20experience%20methods.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ehere%20is%20a%20UserVoice%20Also%20created%20for%20the%20same%20go%20ahead%20and%20read%20the%20comments%20that%20will%20give%20you%20some%20insights.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmicrosoftintune.uservoice.com%2Fforums%2F291681-ideas%2Fsuggestions%2F37093513-disable-windows-hello-on-windows-devices-after-int%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmicrosoftintune.uservoice.com%2Fforums%2F291681-ideas%2Fsuggestions%2F37093513-disable-windows-hello-on-windows-devices-after-int%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1387160%22%20slang%3D%22en-US%22%3ERe%3A%20Autopilot%20devices%20forcing%20dsafsdfadfasdfWindows%20Hello%20for%20Business%20setupsdfasdfasdf%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1387160%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F181929%22%20target%3D%22_blank%22%3E%40Pervaiz%20Dostiyar%3C%2FA%3E%26nbsp%3Bsadfasdfasdf%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1387181%22%20slang%3D%22en-US%22%3ERe%3A%20Autopilot%20devices%20forcing%20Windows%20Hello%20for%20Business%20setup%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1387181%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F181929%22%20target%3D%22_blank%22%3E%40Pervaiz%20Dostiyar%3C%2FA%3E%26nbsp%3BWell%20that%20is%20frustrating....I%20have%20figured%20out%20a%20policy%20to%20disable%20WHfB%20intune%20for%20already%20registered%20devices%2C%20but%20if%20there%20is%20no%20way%20to%20prevent%20the%20WHfB%20pop-up%20when%20using%20User-Driven%20autopilot%2C%20I%20am%20not%20sure%20if%20this%20will%20be%20the%20correct%20route%20for%20me.%26nbsp%3B%20At%20least%20not%20at%20this%20time.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

We are not currently using autopilot but I am planning on rolling it out with some new devices we are purchasing in a few months.  I have been doing some experimenting with it and I am stuck.  In Intune enrollment settings I have set windows hello for business to disabled.  However, whenever I try to enroll a device with autopilot it tries to force the user account to enroll in windows hello.

 

I understand the benefits of using windows hello, but I am not currently ready to roll it out to my users.  Can anyone help me figure out why this is happening?  I have attached a screenshot of my windows hello settings.

Hello for business disable.JPG

5 Replies
Highlighted

@muels7I don't think this disabled applies to the Windows Autopilot it only applies to enroll already in used devices or doing the OOBE out of the box experience methods.

 

here is a UserVoice Also created for the same go ahead and read the comments that will give you some insights.

 

https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/37093513-disable-windows-hello...

Highlighted
Highlighted

@Pervaiz Dostiyar Well that is frustrating....I have figured out a policy to disable WHfB intune for already registered devices, but if there is no way to prevent the WHfB pop-up when using User-Driven autopilot, I am not sure if this will be the correct route for me.  At least not at this time.

Highlighted

@muels7I can understand this but i am sure there will be a policy or a switch for it soon maybe someone needs to put that on Uservoice.

 

Highlighted
I have had the same. Still wondering what is going on there.... Do you have Security Baselines in place?