(152) Microsoft Intune - Disable Windows Hello for Business (WhfB)

A customer wanted to deployed Shared PC for a new lab next year, as a requirement they also wanted to disable Windows Hello for Business from appearing on logon.

In the past, I know that using the following would work: - Method 1: Windows Hello for Business (Device Enrollment)

- Method 2: Device Configuration Profile (Identity Protection) which is now deprecated

Solution:

By navgating to https://intune.microsoft.com/ then search for Profile type: Settings Catalog, search for Windows Hello for Business, select the following:

• Use Windows Hello for Business (User) = False

• Allow use of biometrics = False

• Use Security Key for Signin = Disabled

• Use Windows Hello for Business (Device) = False

• Use Remote Passport = Disabled

Once the device received the policy after enrollment or restart, it never prompted to setup WhfB.