Windows Hello for Business \ Hands free login using RFID\Proximity card (not certificates)

Question

Using domain joined or hybrid joined laptops with RFID cards and readers, we would like to login with windows password plus rfid card (not certificates). On subsequent unlocks, we want only to swipe the rfid card. I know this isnt the best MFA option from a security perspective but we need a hands free unlock. Is this possible with anything Windows Hello for Business or Azure MFA?

Im interested in other possible solutions that are native to windows\azure that dont require 3rd party software or proprietary hardware. Yubikeys, while nfc is available, it seems to require physical handling of the key\app to login and unlock. Wondering if something bluetooth is available?

Answer 1

I know this is a really old post but I wanted to give another solution using Windows Hello. I have a really cheap USB RFID reader plugged into my Windows machine. Open notepad and scan your badge. It will give you the number it reads when scanning the badge. Simply make your Windows Hello PIN number that number and you can now use your badge to sign in.

Additionally with my reader it can be programmed to operated differently like after scanning click return or tab. Mine is set to click return after the scan so no keyboard input is needed at all. Maybe this will help someone else who stumbles on this thread!

Answer 2

@Have Aloha By default, it does not come prebuilt with windows. There is no such option with Windows hello for business. We can do a biometric based face unlock with windows hello but it seems you need a way with RFID.

For that setup, you would need some 3rd party microcontroller with custom code and a RFID reader attached to the machine. I can suggest you is to read this process as documented here and explorer similar options :
https://circuitdigest.com/microcontroller-projects/login-to-windows-computers-using-rc522-rfid-tag-and-arduino

-----------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.