Can all Windows Hello users log on to all computers in the domain?

Question

Hello, I was wondering if I enable windows Hello on my company's PCs all login information is kept on my Active Directory server? For example, if tomorrow I force the use of Windows Hello, will my colleagues be able to connect on all the PCs in the domain using their Windows Hello information? In the same way that their account in the active directory allows them to connect to all the PCs in the domain with their username and password

Answer 1

Hello there, You understanding might be different, Windows Hello is set up on the user's device and Windows asks the user to set a gesture, which can be a biometric, such as a fingerprint, or a PIN. The user provides the gesture to verify their identity. Windows then uses Windows Hello to authenticate users. If you configure the group policy for computers, all users that sign-in to those computers will be allowed and prompted to enroll for Windows Hello for Business. If you configure the group policy for users, only those users will be allowed and prompted to enroll for Windows Hello for Business. This article might help you in understanding this better https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-faq Hope this resolves your Query !! --If the reply is helpful, please Upvote and Accept it as an answer--