Enable Windows Hello for Business in Windows 10 Devices

[kyevi]

Hi,

I would like to enable Windows Hello in my On prem AD only environment(migrating to 100% EntraID in future), however with the minimum effort and I do not want to enable any aditional services. The docummentation looks a bit confusing to me since it always add a step to add aditional services like Kerberos, Public Key Infrastructure. 

I just want to know if I can only enable Windows Hello via GPO and deploy it to all devices just like that.

I have set the GPO on my device only and I was able to set Windows Hello PIN and Biometrics.


Regards.

[#2]

What I understood so far is that if I simply enable the Windows Hello for bussiness in my on prem only environment without adding any extra services, I will not be able to use the Reset PIN options.

Is that so?