I want to make Windows Hello for Business provisioning AVAILABLE to end users without forcing the provisioning experience every time they sign onto a new system. Certain employees (like field techs) sign into many different systems - and I want them to have the discretion to enable WHFB on whatever pc they are using. I don't want to badger them with a forced experience (configured via group policy) every time these employees sign into a new pc.