WHfB 10 user limit on TPM chip - any housekeeping?

Question

We are enabling WHfB for users. For users of shared computers, I'd like to know if there is any housekeeping that can be done to remove WHfB credentials from a TPM chip that haven't been used for a while to prevent the TPM chip reaching it's 10 user limit.

Answer 1

I haven't tried this, but it looks like this should help and do what is needed: https://support.microsoft.com/en-us/topic/using-whfbtools-powershell-module-for-cleaning-up-orphaned-windows-hello-for-business-keys-779d1f3f-bb2d-c495-0f6b-9aeb940eeafb