WHfB On Different Devices

Question

WHfB On Different Devices

Tom Wrigglesworth 125

Howdy all,

Is it possible to use WHfB to sign in to Windows 10 computers, hybrid joined? We have users that just share different machines and it would just make life easier for them - suggestions if there's other options?

Can we assign multiple faces to a single account? They all use 'Construction' and there's 7 of them sharing the account.

Thanks

Accepted answer

0 additional answers

Your answer

Answer 1

Crystal-MSFT 53,971 Microsoft External Staff

@Tom Wrigglesworth, Thanks for posting in Q&A. Based on my researching, it is possible to use Windows Hello for Business (WHfB) to sign in to Windows 10 computers that are hybrid joined. WHfB supports passwordless authentication using biometrics such as facial recognition or FIDO2 security keys. However, it is not possible to assign multiple faces to a single account. Each user must have their own account to use WHfB for authentication.

Hope the information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Tom Wrigglesworth 125 Reputation points

2023-12-01T07:57:00.8566667+00:00

Wonderful - thank you for this. Do Microsoft have any documentation on how to get passwordless going? If we get this starting, how do mobile emails and intune enrolment fit in? Would they still need to know their password?
Crystal-MSFT 53,971 Reputation points Microsoft External Staff

2023-12-01T08:14:45.3933333+00:00

@Tom Wrigglesworth, Thanks for the reply. To manage windows hello for business, here is a link for the reference:

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-manage-in-organization

Due to enroll device into Intune, we use Azure AD (Microsoft Entra) user account to do the enrollment. It needs the Azure AD user account and password to do it.

Hope it can help.
Tom Wrigglesworth 125 Reputation points

2023-12-01T16:52:44.3866667+00:00

Fantastic - thank you for the help. One last dim questions - I use my finger print to sign in to my standard account but I want to use WHfB for my domain admin account, so I can action UAC prompt with biometrics. Is it possible or would I need to choose an account for the biometrics to use?
Crystal-MSFT 53,971 Reputation points Microsoft External Staff

2023-12-04T02:51:39.9133333+00:00

@Tom Wrigglesworth, Thanks for yoru reply. Based on my researching, it is possible to use Windows Hello for Business (WHfB) for your domain admin account while using your fingerprint to sign in to your standard account.
Tom Wrigglesworth 125 Reputation points

2023-12-04T08:06:52.29+00:00

Amazing :D thank you - do we have a log that we could follow when WHfB is used for manually administration? We're trying to clamp down on it.
Crystal-MSFT 53,971 Reputation points Microsoft External Staff

2023-12-04T08:24:57.14+00:00

@Tom Wrigglesworth, Thanks for the reply. Based on my researching, I only find the event log with some information.

https://learn.microsoft.com/en-us/troubleshoot/windows-client/user-profiles-and-logon/event-id-300-windows-hello-successfully-created-in-windows-10

But you can contact windows support to see if there's any other log we can check.
Tom Wrigglesworth 125 Reputation points

2023-12-04T08:46:00.38+00:00

Excellent, thank you for your help :)
Crystal-MSFT 53,971 Reputation points Microsoft External Staff

2023-12-04T09:26:25.31+00:00

@Tom Wrigglesworth, Thanks for the reply. If the previous answer is helpful, would you mind click "Accept Answer" to help others find the suggestion. Thanks!

Share via

WHfB On Different Devices

0 additional answers

Your answer