Windows Hello for Business implementation

[Jordi_Koenderink]

Hi,

For a couple of days now we've introduced Windows Hello for Business (WHfB) to a subset of test devices from within Intune. Everything works as expected except for one thing I guess:

When someone tries to logon with a non-enterprise account (eg. @live.nl) in Teams, and/or Onedrive, the machine is prompting to authenticate with WHfB. Am I missing something? Why is this happening and how can we prevent this?

Any thoughts are welcome.

[#2]

I guess that's just Windows Hello for Business trying to be nice for you 🙂 If you login to a client using Windows Hello for Business, it defaults to that when getting prompted for credentials. You can select other options and then enter a username/password right?

[#3]

Not sure if you can but what I'm more interested in is, why is this happening for personal accounts and how can we prevent this?

[#4]

Hi Jordi,

Is the Config Profile scoped for Devices? If yes, I would scope it for users.
Are the non enterprise accounts guest in your tenant? I would also unlink it from Email accounts under Accounts- Setting.

Let’s us know how it goes!
Moe

[#5]

@Moe_Kinani:

We are using the Settings catalog and basically used all the Windows Hello settings available which is already scoped to users, the enterprise accounts are not guests. See the below snippet from my environment:

The issue shows up in the non-work Teams app. 

I'm not sure what you mean by "unlink it from Email accounts". Can you elaborate?

[#6]

Yes unlink them, is it possible to change from Catalog Setting to Regular Template Profile- Identity Protection for testing?

Moe

[#7]

Unlinked it and tried the Regular Template Profile- Identity Protection: same issue.

[#8]

@Jordi_Koenderink,

Try disabling this setting and give another try-

Moe

[#9]

@Moe_Kinani

Same thing.