Set-CMIntuneSubscriptionPassportForWorkProperty

Updates a Microsoft Intune subscription to enable Windows Hello for business.

Syntax

Set-CMIntuneSubscriptionPassportForWorkProperty
   [-Enable <Boolean>]
   [-RequireTpm <Boolean>]
   [-MinPinLength <Int32>]
   [-MaxPinLength <Int32>]
   [-AllowUppercase <Boolean>]
   [-AllowLowercase <Boolean>]
   [-AllowSpecialChar <Boolean>]
   [-PinExpirationDays <Int32>]
   [-PreventPinReuseCount <Int32>]
   [-EnableBiometric <Boolean>]
   [-EnableEnhancedBiometric <Boolean>]
   [-UseRemotePassport <Boolean>]
   [-PassThru]
   [-DisableWildcardHandling]
   [-ForceWildcardHandling]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

The Set-CMIntuneSubscriptionPassportForWorkProperty updates the settings of a Microsoft Intune subscription to enable Windows Hello for business for enrolled devices.

NOTE: Windows Hello for Business was previously known as Microsoft Passport for Work.

Examples

Example 1: Enable Windows Hello for business

PS C:\> Set-CMIntuneSubscriptionPassportForWorkProperty -Enable $True -RequireTpm $True -MinPinLength 5 -MaxPinLength 8 -AllowUpperCase $True -AllowLowerCase $True -AllowSpecialChar $True -PinExpirationDays 2 -PreventPinReuseCount 3 -EnableBiometrics $False -EnableEnhancedBiometrics $False -UseRemotePassport $False

This command enables Windows Hello for business for enrolled devices.

Optional Parameters

-AllowLowercase

Indicates whether lower-case letters are allowed in the PIN.

Type:Boolean
Aliases:RequireLowercase
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-AllowSpecialChar

Indicates whether special characters are allowed in the PIN.

Type:Boolean
Aliases:RequireSpecialChar
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-AllowUppercase

Indicates whether upper-case letters are allowed in the PIN.

Type:Boolean
Aliases:RequireUppercase
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False
-DisableWildcardHandling

DisableWildcardHandling treats wildcard characters as literal character values. Cannot be combined with ForceWildcardHandling.

Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Enable

Indicates whether Windows Hello for business for enrolled devices is enabled.

Type:Boolean
Aliases:Enabled
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-EnableBiometric
Type:Boolean
Aliases:EnableGestures, EnableBiometrics
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-EnableEnhancedBiometric
Type:Boolean
Aliases:EnableEnhancedAntiSpoofing, EnableEnhancedBiometrics
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-ForceWildcardHandling

ForceWildcardHandling processes wildcard characters and may lead to unexpected behavior (not recommended). Cannot be combined with DisableWildcardHandling.

Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-MaxPinLength

Specifies the maximum required PIN length.

Type:Int32
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-MinPinLength

Specifies the minimum required PIN length.

Type:Int32
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-PassThru

Returns the current working object. By default, this cmdlet does not generate any output.

Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-PinExpirationDays

Specifies the number of days before the PIN expires.

Type:Int32
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-PreventPinReuseCount

Specifies the number of previous PINs that the user is prevented from reusing.

Type:Int32
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-RequireTpm

Indicates whether a Trusted Platform Module (TPM) is used.

Type:Boolean
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-UseRemotePassport

Indicates whether Phone Sign In is enabled.

Type:Boolean
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False