Windows Hello for Business Keeps Prompting for PIN

[Stuart King]

Hi All

Strange one here.

Windows Hello for Business is Disabled in Intune yet new devices are still being prompted for a PIN.

Additional info: ADFS environment and recent conversion to Hybrid Azure AD Join.

Any ideas

[#2]

Have you disabled it in Windows Enrollment or through a config policy?

[#3]

@Thijs Lecomte 

Hey thanks for your reply.

WHfB has been Disabled in Windows Enrollment.

Is there anywhere else that this would come from?

[#4]

There might be a seperate Intune policy.
If you go to the WHFB settings, does it say managed by your org?

[#5]

Hi Stuart,

It could be coming from Configuration Profile or Security Baseline.

You can also check traditional Group Policy Management in case anything scoped from there.