question

HankH-2075 avatar image
0 Votes"
HankH-2075 asked HankH-2075 commented

User was required to set up MFA/Hello even though no policy is set?

I created a user in AzureAD, reset the password (Because I forgot it..).

AzureAD joined a laptop using a ppkg and when I signed in on Windows with the created user I was given the message that Hello for Business was required.

Configure Hello for Business is set to Not Enabled and I can't find any MFA policies in Conditional Access etc, so how come the user was forced to set up MFA when signing into PC?

Attached a screenshot of Hello for Business.105531-screen-shot-2021-06-14-at-12445-pm.png


azure-ad-user-management
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

JamesHamil-MSFT avatar image
0 Votes"
JamesHamil-MSFT answered HankH-2075 commented

Hi @HankH-2075 , Windows Hello requires MFA for all users. If you're using WHFB you must use MFA. I hope this helps! Please let me know if you have any questions.

If this answer helped you please mark it as "Verified" so other users may reference it.

Thank you,
James


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I'm not using WHFB though?

As shown in the screenshot "Configure Windows Hello for Business" is set to Disabled.

0 Votes 0 ·