You can configure the feature tenant wide or use account protection policy instead.
Windows Hello for Business- Intune
We have Windows 10/11 devices enrolled in Intune. How can we enable users to use WHfB for computer logons without requiring it to be used?
The option for standard users to set up WHfB in the device settings are grayed out.
2 answers
Sort by: Most helpful
-
Rahul Jindal [MVP] 10,601 Reputation points MVP
2025-01-21T21:48:36.5266667+00:00 -
Xenia-MSFT 3,675 Reputation points Microsoft Vendor
2025-01-22T01:58:35.58+00:00 @Chloe Hall Thanks for posting in our Q&A.
Based on my research, I find someone else has discussed this issue.
https://www.reddit.com/r/Intune/comments/z7xh4i/enable_whfb_for_users_without_requiring_it/
Note: Non-Microsoft link, just for the reference.
In the end, the WHFB is disabled under windows enrollment page and a configuration policy is created for WHFB.
Hope it will help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.