How to disable Windows Hello for Business for AAD Joined Devices

Question

Windows Hello for Business is not configured in endpoint management.
]3

When a device is joined to Azure AD users are prompted to register a pin and use Windows Hello for Business.

We do not want the users to be prompted for Windows Hello for Business.

How do we disable the prompt for Windows Hello for Business registration after joining a Windows 10 system to Azure AD?

Answer 1

@rstager Thanks for reaching out.

For your required scenario, you would need to select the disable option in Windows hello for business like this :

Do note that this is a tenant wide scope and cannot be scoped for any certain devices/users.

-----------------------------------------------------------------------------------------------------------------

If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.

Answer 2

Is there a way to disable PIN only for certain devices? Like meeting room devices, which are only used occasionally by users?

Answer 3

Hi @Nejc Novak , if it still unsolved for you:
it looks like you can create a dedicated device configuration profile and disable Windows Hello for Business for certain groups or users:
https://learn.microsoft.com/mem/intune/protect/identity-protection-configure?WT.mc_id=M365-MVP-5004286