Windows Hello for Business with Azure ADDS

Question

What do I need for implementing Windows Hello for Business in my organization?

I am starting off with Managed Active Directory from a service provider, with a DNS domain. My laptop is listed as AD Joined in our Azure AD. It is not managed this way currently (we don't have anything set up to manage these devices).

What do I need to get Windows Hello for Business enrollment for this laptop? Do I need to have inTune for it?

If I need inTune, then can I get a subscription that is inTune to work with this Managed AD or do I have to subscribe to other services as well? What subscriptions are available for this? Do I need a certificate authority to be set up too?

End goal, for MFA to be used with all accounts on my local laptop.

Answer 1

@Gregory Smith , From your description, I know you want to know if Intune is needed for implementing windows Hello for business. Based on my research, I find there are three deployment models for Windows hello for Business, cloud only, hybrid, and on-premises.
https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-planning-guide#deployment-models

And under Windows Hello for Business Deployment Prerequisite document which Carlos provided, I find Intune is an option, not necessary. You can consider it based on your requirement.

Meanwhile, here are the Windows Hello for Business settings we can configure in Intune for your reference if you consider using Intune
https://learn.microsoft.com/en-us/mem/intune/protect/windows-hello
https://learn.microsoft.com/en-us/mem/intune/protect/identity-protection-windows-settings

Hope it can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @Gregory Smith

Thank you for asking this question on the **Microsoft Q&A Platform. **

Here you will see all the Prerequisite for Windows Hello ttps://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-identity-verification

Hope this helps,
Carlos Solís Salazar

----------

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.
NOTE: To answer you as quickly as possible, please mention me in your reply.

---