Windows Hello for Business - Disable required setup prompt while allowing manual configuration

Question

Greetings,

We're setting up Windows Hello for Business in our tenant, and there is one setting I simply cannot find.

Issue:

When a device is logged into after receiving the policy, it will prompt the user with a full screen window- requesting the user to setup their pin and facial recognition. We would like to disable this prompt, as we're offering Windows Hello as a optional login method- but this makes it seem required for a lot of people.

Wanted outcome:

The results I am looking for is where Windows Hello isn't prompting anything at all, but the user may still enter Settings and manually enable it. (Like when they skip the logon prompt.)

Hopefully I've just overlooked something, but most "answers" to this question has asked me to completely disable Windows Hello.

Thanks in advance,
~Adrian H. Ulland

Answer 1

@Adrian Halfdan Ulland Thanks for posting in our Q&A.

Based on my research, I find someone has discussed this issue. Please refer to the following link:

https://www.reddit.com/r/Intune/comments/y9gr60/disable_mandatory_windows_hello_for_business/

Note: Non-Microsoft link, just for the reference.

In conclusion, it is needed to disable a tenant level Windows Hello for Business under Devices > Enrollment > Windows Hello for Business in intune portal. And then configure GPO or CSP to enable WHFB manually.

Hope it is what you want.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Im having too many issues with DISABLE WINDOWS HELLO as that Tenat Level something that is supposed to be simple but Microsoft complicates it. Microsoft Keeps changing things in Intune, moving thing around and we as Techs in the Industry we have to relearn this. Microsoft is the Problem!! Its frustring that I can simply Disable Window Hello at the Tenant Level to where when a user signs in they get prompted for Windows Hello. Clients dont like that! So Im having to go into different areas of The Tentant digging through Microsoft Techology and it gets mentally duanting. Microsfot You need to fix this problem and stop changing and movign things around in the User Interfaces. Even Im having to use Microsoft Copilot and even the AI Microsoft Copilot does NOT know where Microsoft Changed as its giving me false Paths. So i ahve to do screen shots to Copilot and we both have to dig deep and locate things. Time is too valuable to be wasted becasue of Micosoft Changing UI. I have to live life but Microsoft Consumes my TIME. So Fix This Microsoft to where we have a easy Option to simply DISABLE WINDOW HELLO!!!