Windows hello For Business

Question

Hello All,

We are working on getting Windows Hello For Business up an running. We have setup the cloud Kerberos trust and have configured a test group to get WHFB. We see the Configuration policy apply to the computer as it should and I get the message on my machine that your organization requires additional sign-in security to set up but I never get the enrollment for windows hello. I tested this on a different device and it came up. I had a different user login to that device and they got the enrollment for hello. Not sure where to look at why it is not applying for me

Aany help would be greatly appreciated

Answer 1

@labadmin, Thanks for posting in Q&A. From your description, I know you have setup the cloud Kerberos trust and have configured a test group to get WHFB. But your account on your device is not working.

Before going on, please confirm if we follow the steps in the link below to deploy windows hello for business.

Simply deploy Cloud Kerberos and configure WHFB cloud trust via Intune. 

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust?tabs=intune

Meanwhile, please ensure the requirements are all met. Here is the windows requirement for your reference. (If the deployment mode is Hybrid and the trust type is Cloud Kerberos. please ensure the window version is supported and with the latest updates installed.)

Please try the above suggestion and if there's any update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.