Windows Hello for Business - Disable required setup prompt while allowing manual configuration

Question

Greetings,

We're setting up Windows Hello for Business in our tenant, and there is one setting I simply cannot find.

Issue:

When a device is logged into after receiving the policy, it will prompt the user with a full screen window- requesting the user to setup their pin and facial recognition. We would like to disable this prompt, as we're offering Windows Hello as a optional login method- but this makes it seem required for a lot of people.

Wanted outcome:

The results I am looking for is where Windows Hello isn't prompting anything at all, but the user may still enter Settings and manually enable it. (Like when they skip the logon prompt.)

Hopefully I've just overlooked something, but most "answers" to this question has asked me to completely disable Windows Hello.

Thanks in advance,
~Adrian H. Ulland

Answer 1

@Adrian Halfdan Ulland Thanks for posting in our Q&A.

Based on my research, I find someone has discussed this issue. Please refer to the following link:

https://www.reddit.com/r/Intune/comments/y9gr60/disable_mandatory_windows_hello_for_business/

Note: Non-Microsoft link, just for the reference.

In conclusion, it is needed to disable a tenant level Windows Hello for Business under Devices > Enrollment > Windows Hello for Business in intune portal. And then configure GPO or CSP to enable WHFB manually.

Hope it is what you want.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.